3.11.5.1 Responder Receiving a Packet on an SA
On receiving an IPsec encapsulation packet, the responder MUST process the packet as specified in [RFC4301], section 5.2. If this processing succeeds, and the ImpersonationHandle on the SA is not zero, the responder MUST set IsImpersonationConnection to TRUE on the connection entry for this connection.