ipsec_failed
if (ipsec_failed(ipss))
} else if (!ipsec_failed(ipss)) {
extern boolean_t ipsec_failed(ipsec_stack_t *);
if (ipsec_failed(ns->netstack_ipsec)) {