A rule that selects particular Internet Protocol (IP) traffic and requests an action for that traffic. Possible actions are to discard the packet, to allow the packet without security, and to take the appropriate IP security action.