Chapter 11 IPsec VPN for FortiOS 5.0 : Defining VPN security policies : Defining VPN security policies : Defining an IPsec security policy for a policy-based VPN
  
Defining an IPsec security policy for a policy-based VPN
An IPsec security policy enables the transmission and reception of encrypted packets, specifies the permitted direction of VPN traffic, and selects the VPN tunnel. In most cases, a single policy is needed to control both inbound and outbound IP traffic through a VPN tunnel.