| Description | string | IPsecPolicyGroup aggregates the set of rules of an IPsec policy. These groups are weak to a System via the PolicyGroupInSystem association.
The IPsecPolicyForSystem and IPsecPolicyForEndpoint associations are used to specify the System and/or IPProtocolEndpoints to which an IPsecPolicyGroup applies. (Examples of a System and an IPProtocolEndpoint are a router and a router interface, respectively.)
The RuleForIKENegotiation aggregates the phase 1 IKE negotiation rules that are part of the group; the RuleForIPsecNegotiation aggregates the phase 2 IKE negotiation rules.
The PolicySetComponent aggregation is used to define a nested group of IPsec policy groups, with each policy group containing one or more rules.
Any nested groups of rules are prioritized with respect to one another and the aggregated rules are evaluated using a 'first match' decision strategy, i.e., when evaluating the list of IKE rules, they are evaluated in priority order until a match is found and when evaluating the list of IPsec rules, they are evaluated in priority order until a match is found. | None | TRANSLATABLE= true |