Scenario: Several IPsec policy filters matches a packet, which filter takes precedence?
http://technet.microsoft.com/en-us/library/bb877982.aspx
http://cbfive.com/blog/post/Tackling-IPSEC.aspx