Security Policy Database

• Provides considerable flexibility in way IPSec services are applied to IP traffic

• Can discriminate between traffic that is afforded IPSec protection and traffic allowed to bypass IPSec

• The Security Policy Database (SPD) is the means by which IP traffic is related to specific SAs