Which of the following statements about IPSec SA is true?