I don't know the answer. But, out of curiosity I started to look up for Ipsec and it looks like it only uses following traffic selectors such as (local-ip-subnets,remote-ip-subnets,local-ports,remote-ports,protocols). I am wondering does OS really has anything to do ? Moreover, as it is over CIFS/NFS protocols, so OS can be ruled out.