Selective ipsec security association recovery

A security enforcement point outage recovery data processing system comprising:

• a security enforcement point;
• an Internet Protocol (IP) Security (Ipsec) endpoint disposed in the security enforcement point;
• selective recovery logic coupled to the security enforcement point;
• a security association (SA) recovery database coupled to the selective recovery logic;
• and,
• outage detection logic coupled to the security enforcement point and the selective recovery logic, the outage detection logic comprising program code enabled to detect an outage in the security enforcement point, the selective recovery logic comprising program code enabled to selectively re-establish only contextually valid SAs listed in the SA recovery database for the security enforcement point responsive to an outage detected in the security enforcement point.

A computer program product comprising a computer usable medium embodying computer usable program code for security enforcement point outage recovery, the computer program product including:

• computer usable program code for compiling a listing of security associations (SAs) for a security enforcement point;
• computer usable program code for monitoring the security enforcement point for an outage;
• and,
• computer usable program code for pruning the listing to include SAs that remain contextually valid, and re-establishing only SAs in the pruned list, both in response to detecting an outage in the security enforcement point.