IP Security Features
It relies on cryptographic proof rather than easily forged IP addresses
Interoperable router and end-system implementations
Separation between authentication and confidentiality to allow wide deployment
Algorithm-independent design, but standard default algorithms are specified
Key management protocol separate from IP security protocol
Suited for both IPv4 and IPv6