The automated and optimized configuration of secure communications inside networks is an indispensable necessity. The transmitted data must be protected to guarantee confidentiality, integrity, and availability. From this point of view, VPNs allow the configuration of secure channels between hosts, even over untrusted networks such as the Internet. However, the introduction of virtual systems based on virtualization significantly changes networks, which have become more dynamic and flexible, but also more complex to configure. Therefore, operations require specialized skills and knowledge of the network and the functions to be implemented, which cannot be managed entirely by humans. One possible solution is to make such operations automatic through a policy-based model.