IPSec cons

IPSec is a cross platform standard for radically different values of "standard"
Many parts of the IPSec RFCs allow things to be implementation specific
Too often, they are.

Requires you recompile kernel
KLIPS (Kernel Level IPSecurity) responsible for snagging IPSec packets