3.10.4.3 Sending a Packet on an Existing Connection

If IsAuthenticatedFirewallConnection is set to TRUE for this connection, then the packet MUST be sent in the clear with no IPSec encapsulation applied, unless exception conditions where IPSec encapsulation is used as specified in section 3.1.7.7 are met. This specifies the sending of data packets by both the initiator and the responder once the connection has been flagged IsAuthenticatedFirewallConnection as specified in section 3.1.7.7.