3.11.4.2 Sending a Packet on an Existing Connection

If the IsImpersonatedConnection flag is TRUE in the connection state table entry corresponding to the connection, the ImpersonationHandle from the connection MUST be used to look up the correct SA for the packet in the SAD. See [RFC4301], section 4.4.2.2.