Skip to main content
Offline·Progress is saved on this device and syncs the next time you open the app online.
Network & Infrastructure

ESP

Encapsulating Security Payload

The IPSec protocol that provides confidentiality, integrity, and authentication.

ESP is the IPSec protocol that provides confidentiality through encryption along with optional integrity and authentication for the data it protects. In tunnel mode it encrypts the entire original packet, which is the basis for site to site and remote access VPNs, while transport mode protects only the payload. The exam contrast is AH, which offers integrity and authentication but no encryption and breaks across NAT, so ESP is the more widely deployed choice. ESP can traverse NAT using NAT-T encapsulation.

Related terms

Looking ESP up is step one. Getting tested on it is step two.

A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.

Not affiliated with or endorsed by CompTIA.