It’s often hard to distinguish between the SPD and the SAD, because they are
similar in concept. The main difference between them is that security policies are
general, while security associations are more specific. To determine what to do with
a particular datagram, a device first checks the SPD. The security policies in the
SPD may reference a particular SA in the SAD. If so, the device will look up that SA
and use it for processing the datagram