Force TLS on Zabbix Server?

[me2017]

I've enabled TLS connections on my Zabbix server and the majority of my agents. I have found the agents which have *not* been configured for TLS, are still able to connect to the Zabbix Server. I realize I can reject these agents by setting 'Connections to host' and 'Connections from host' to 'Certificate' but this is an action on a host by host basis. Is there a means of disallowing non-TLS connections from agents on a global basis?

[me2017]

I am still very interested in learning more about this question. Does anyone here have experience with using TLS on Zabbix?

[Glencoe]

There is no such global setting in Zabbix but you can use mass edit to turn off unencrypted connections for all existing hosts at once.