A database containing rules determining whether a packet is subject to IPSec processing.