A system is provided for establishing a secure link among multiple users
on a single machine with a remote machine. The system includes a
subsystem to filter traffic so that traffic from each user is separate.
The subsystem generates and associates a Security Association (SA) with
at least one filter corresponding to the user and the traffic, and
employs the SA to establish the secure link. An Internet Key Exchange
module and a policy module may be included to generate and associate the
security association, wherein the policy module is configured via
Internet Protocol Security (IPSEC).
