The company's security officer has stated that for compliance reasons, all internal and external network traffic must be encrypted. How should IPsec be implemented?

NetScaler is primarily a load balancer and application delivery controller; it is not the typical method for implementing host-to-host IPsec policies within a Windows domain.

"Secure delivery groups" is a vague term and not a standard method for implementing network-layer IPsec encryption.

Active Directory Group Policy is the standard, scalable method for centrally configuring and deploying IPsec policies to multiple Windows-based servers and clients within an enterprise domain, ensuring consistent enforcement.

Configuring a local IPsec policy in the master image would apply to machines provisioned from that image, but it lacks the central management, enforcement, and auditing capabilities of a Group Policy for an enterprise-wide solution.