When encryption with PSK (didn't test others) is enabled between server and agent, after the agent has sent TCP [FIN, PSH, ACK] the server sends TCP [PSH, ACK]. The agent responds with TCP [RST].
The monitoring works fine. My firewall logs fill up though with drops for the RST from the agent.
When i turn encryption off, there are no drops.