wfIpsecProposalSuites 1.3.6.1.4.1.18.3.5.3.26.8.1.5

the octet string contains a list of ordered, 2 byte numbers that correspond to wfIpsecSuiteEntry instance ID's. The list of protection suites is a logically ANDed list. This allows multiple protocols to be used for a policy.