These security enhancements are new in the Solaris Express 2/05 release.
IKE is fully compliant with NAT-Traversal support as described in RFC 3947 and RFC 3948. IKE operations use the PKCS #11 library from the cryptographic framework, which improves performance. The cryptographic framework provides a softtoken keystore for applications that use the metaslot. When IKE uses the metaslot, you have the option of storing the keys on an attached board or in the softtoken keystore.
For further information about IKE, see the System Administration Guide: IP Services.