Anyway to find out what OpenSSL version IEM is using?

On windows as a retrieved property, try this:
(name of it, value “ProductVersion” of version block 1 of it) of find files “libBES*.dll” of parent folder of client

On a machine running version 9.0.649.0 of the agent, this returns:
libBEScrypto_1_0_0_1.dll, 0.9.8f-dev
libBEScrypto_1_0_0_5.dll, 0.9.8y

There are two libraries, one used for fips mode, the other for non-fips mode. The higher version number in the file name indicates the non-fips version.