I haven't studied IPSec closely. How much of this advice actually got implemented?