HP-UX IPSec version A.02.01 Administrator's Guide
HP-UX IPSec and Serviceguard
Introduction
Appendix G 329
If a package client is an HP-UX system using a version of HP-UX IPSec
released prior to A.01.07, or if it is not an HP-UX system, the package
client may not delete SA information when it receives the
INITIAL-CONTACT notify message. In these cases, an administrator
must manually delete the SAs on the package client.