which vpn protocol typically employs ipsec as its data encryption mechanism