Once you have enabled the “enhanced security” all the TCP communication between the Bigfix components, including the relays, use the https and TLS 1.2. If you are concerned about the “downstream communication” (notifications) it is only UDP and only between the relay and the clients.