diff --git a/src/connector/src/source/cdc/external/mod.rs b/src/connector/src/source/cdc/external/mod.rs
index fc5226a3bf183..40b9f97bb5c2a 100644
--- a/src/connector/src/source/cdc/external/mod.rs
+++ b/src/connector/src/source/cdc/external/mod.rs
@@ -260,7 +260,7 @@ pub enum SslMode {
 
 impl Default for SslMode {
     fn default() -> Self {
-        Self::Disable
+        Self::Prefer
     }
 }