yes... all connections are via tls and only clients with a valid certificate (issued by the netmaker server) are allowed to connect