IP Security
Facilitate direct IP connectivity between sensitive hosts through untrusted networks
Prevent users from erecting barriers which impedes normal use of the Internet
Provide application-independent security
No substitute for application layer security