I think that is a great question. I have been wondering myself for a while too. Unfortunately I am so short on time that I have'nt even look in google
I think you need it if you wun IPSec, more than that I am in the dark.
I would like to learn about this too