IPsec policy is enabled by default, but it lacks configuration information.
Key management is not enabled by default. You can configure IKE or manual key management, or both. Each IKE rule indicates which key management service is used. The ikeadm command can modify the running IKE daemon.