The AEP Net ED20M protects IP traffic across networks. The encryptor provides both data confidentiality and source authentication for network traffic enabling Virtual Private Network (VPN) communications. The products can be deployed as an IP Security Gateway at the network interface or at the workstation to support end-to-end or data separation requirements. The use of an IETF standard transport protocol allows the encrypted traffic to be routed across non-IP networks e.g. ATM, xDSL MPLS Frame Relay ISDN Satcom and Radio Links. The encryption system employs a central management station for key management and distribution and encryptor and network configuration enabling fit and forget operation for the encryptors themselves. Version 5 and later approved for Data Separation Reverse Tunnelling and Closed User Groups.