When a security group in OpenStack is configured for the "esp" protocol, the protocol number is used in AIM (50). However, when this value is sent to APIC, it gets converted back to its string representation ("esp"). The converter should be modified to support either 50 or "esp" from APIC.