A data processing system, method, and product are disclosed for automatically configuring IP security tunnels. A security policy specification format is established that is capable of being utilized by any one of multiple different operating systems and any one of multiple different machine types. An...http://www.google.com/patents/US7171685?utm_source=gb-gplus-sharePatent US7171685 - Standard format specification for automatically configuring IP security tunnels