What security policies include

If you are establishing IPSec security associations, you will want to know about security policies and what they include. Security associations are created based on information collected in security policies, which determine how security is handled in a transfer of information.

Security policies can include any of the following types of specifications:

The source and destination addresses (or ranges of addresses) of the end-stations (storage system and client)
Packet authentication methods
Packet encryption methods
Restrictions on ports and services
Whether inbound and outbound SAs are mirrored
Strictness of policy application

Security policies are stored in the Security Policy Database (SPD) when IPsec is enabled on an end-station. Matching security policies must be configured on your storage system and clients.