. . . . "This allows a network device, such as a router or gateway, to act as an IPSec proxy and perform encryption on behalf of the hosts." .