Putting IPsec into all host devices provides the most
flexibility and security. It enables end-to-end security between any two devices on
the network. However, there are many hosts on a typical network, so this means far
more work than just implementing IPsec in routers