A method, comprising: configuring (302; 502) a firewall at a first computing device, wherein, in response to the first computing device determining that a data packet received from a second computing device is unencrypted, the firewall is configured to initiate the first computing device to establish a secured connection with the second computing device; detecting, at the first computing device, the data packet received from the second computing device; in response to detecting the data packet being unencrypted, establishing the secured connection between the first computing device and the second computing device, wherein the secured connection is established using Internet Protocol Security, IPsec; in response to establishing the secured connection between the first computing device and the second computing device, communicating encrypted data packets with the second computing device using the secured connection, wherein the communicating encrypted data packets with the second computing device using the secured connection comprises: receiving, an encrypted data packet from the second computing device; determining a first tag that associates with a security parameter index, SPI, wherein the SPI indicates a security association, SA, associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI; and accepting the encrypted data packet based on matching the first tag with a second tag configured in the firewall; wherein establishing the secured connection includes generating the SA for the secured connection; and wherein the method further comprises: determining that the second computing device has the verified identity based on information exchanged during Internet Key Exchange, IKE, of the IPsec; in response to determining that the second computing device has the verified identity, associating the first tag with the SA to indicate the verified identity of the second computing device. configuring (302; 502) a firewall at a first computing device, wherein, in response to the first computing device determining that a data packet received from a second computing device is unencrypted, the firewall is configured to initiate the first computing device to establish a secured connection with the second computing device; detecting, at the first computing device, the data packet received from the second computing device; in response to detecting the data packet being unencrypted, establishing the secured connection between the first computing device and the second computing device, wherein the secured connection is established using Internet Protocol Security, IPsec; in response to establishing the secured connection between the first computing device and the second computing device, communicating encrypted data packets with the second computing device using the secured connection, wherein the communicating encrypted data packets with the second computing device using the secured connection comprises: receiving, an encrypted data packet from the second computing device; determining a first tag that associates with a security parameter index, SPI, wherein the SPI indicates a security association, SA, associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI; and accepting the encrypted data packet based on matching the first tag with a second tag configured in the firewall; receiving, an encrypted data packet from the second computing device; determining a first tag that associates with a security parameter index, SPI, wherein the SPI indicates a security association, SA, associated with the secured connection, the first tag indicates that the second computing device has a verified identity, and the first tag is different than the SPI; and accepting the encrypted data packet based on matching the first tag with a second tag configured in the firewall; wherein establishing the secured connection includes generating the SA for the secured connection; and wherein the method further comprises: determining that the second computing device has the verified identity based on information exchanged during Internet Key Exchange, IKE, of the IPsec; in response to determining that the second computing device has the verified identity, associating the first tag with the SA to indicate the verified identity of the second computing device. determining that the second computing device has the verified identity based on information exchanged during Internet Key Exchange, IKE, of the IPsec; in response to determining that the second computing device has the verified identity, associating the first tag with the SA to indicate the verified identity of the second computing device.