A system is provided for establishing a secure link among multiple users on a
single
machine with a remote machine. The system includes a subsystem to filter traffic
so that traffic from each user is separate. The subsystem generates and associates
a Security Association (SA) with at least one filter corresponding to the user
and the traffic, and employs the SA to establish the secure link. An Internet Key
Exchange module and a policy module may be included to generate and associate the
security association, wherein the policy module is configured via Internet Protocol
Security (IPSEC).
