DPOD Syslog agents use TCP (not UDP) in order to deliver reliable connection. The agents do not use an encrypted tunnel (SSL / TLS).
To use an encrypted tunnel, the organization may use external tools to proxy DPOD agents (E.g. the open source tool https://www.stunnel.org/index.html - GNU GPL license)