ENST Bretagne A common usage of IPsec is bidirectional ESP tunnels (secure Virtual Private Networks): the original packet is encapsulated in a new IP header and protected (ESP can provide confidentiality, authentication, integrity and anti-replay) by IPsec ESP (in tunnel mode).