Explanation:
as stated in the official CCSE courseware: “The SecuRemote client is made up of a kernel module and a daemon. The kernel module is an NDIS driver that is installed between the TCP/IP stack and the adapter in use, and filters all TCP/IP communication passing through the PC. See Page 11.14 of CCSE NG Official Courseware. (VPN1-FW1 Management II NG FP-1).

---