Mixing encrypted and nonencrypted policies focus on groups of similar IP endpoints and common network resources. This policy contains information about administering network regions for different IP endpoint groups based upon location or network characteristics. Creating separate network regions, each with its own encryption scheme, then interconnecting the regions can apply encrypted and nonencrypted policies across the enterprise.