You can remove a security association from the ESX host.

You can remove a security association using the vSphere CLI. For information on using the vSphere CLI, see the vSphere Command-Line Interface Installation and Scripting Guide and the vSphere Command-Line Interface Reference.

Be sure that the security association you want to use is not currently in use. If you try to remove a security association that is in use, the removal operation fails.

Use the command esxcfg-ipsec --remove-sa security association name.