| Name | Data Type | Default Value | Qualifiers | 
| Name | Data Type | Value | 
| DFHandling | uint16 |  | 
| Description | string | DFHandling controls how the 'Don't Fragment' bit is managed by the IPsecSAEndpoint. | 
| ValueMap | string | 0, 2, 3, 4 | 
| Values | string | Unknown, Copy from Internal to External IP Header, Set DF Bit in External Header to 1, Set DF Bit in External Header to 0 | 
| EncapsulationMode | uint16 |  | 
| Description | string | EncapsulationMode indicates whether the IPsecSAEndpoint uses transport or tunnel encapsulation. | 
| ValueMap | string | 0, 2, 3 | 
| Values | string | Unknown, Tunnel, Transport | 
| InboundDirection | boolean |  | 
| Description | string | InboundDirection specifies whether the SA applies to inbound (TRUE) or outbound (FALSE) traffic. | 
| PFSInUse | boolean |  | 
| Description | string | PFSInUse indicates whether perfect forward secrecy is required when refreshing keys. | 
| SPI | uint32 |  | 
| Description | string | SPI contains the Security Parameter Index of the SA. This value in string form may also be used in the key field 'Name' inherited from ServiceAccessPoint. |