| 14.3 |  | Task 1 - Prepare to Configure VPN Support |
| 14.3.4 |  | Step 4 - determine the IPSec policy |

| Determining network design details includes defining a more detailed security policy for protecting traffic. This detailed policy helps select IPSec transform sets and modes of operation. A detailed security policy should answer the following questions:

- What protections are required or are acceptable for the protected traffic?
- What traffic should or should not be protected?
- Which PIX Security Appliance interfaces are involved in protecting internal networks, external networks, or both?
- What are the peer IPSec endpoints for the traffic?
- How should SAs be established?

Figure shows a summary of IPSec encryption policy details that will be configured in the examples later in this module.