detecting an unrecognized Internet Protocol Security (IPsec) packet associated with an IP address at a first node within a cluster;

retrieving one or more selector fields from the IPsec packet upon detecting the unrecognized IPsec packet;

querying of a security policy database to determine whether a destination IP address included in the one or more retrieved selector fields matches one or more matching outbound IPsec policies associated with the destination IP address;

determining whether a matching outbound IPsec policy includes an IPsec policy associated with the destination address entry; and

establishing the first IPsec SA communication session between the first node and the client based on the outbound IPsec policy.