ESP (Encapsulating Security Payload) is the most common protocol for encapsulation of the actual data in the VPN session. ESP is IP Protocol 50, so is not based TCP or UDP protocols . Because of this, NAT devices often have a problem with ESP (read on for more on this).