This object specifies whether sub-component filters within a compound IPsec Security Policy filter are combined using AND logic (all must match) or OR logic (any can match). This controls how filter matching decisions are evaluated when packets are checked against the security policy. An operator sets this when defining policy rules to create complex filtering logic that determines whether packets are allowed, denied, or require encryption.