Which component of a GETVPN deployment is responsible for obtaining an IPsec SA to encrypt data within a group?

{} [+]