diff --git a/src/connector/src/source/cdc/external/mod.rs b/src/connector/src/source/cdc/external/mod.rs
index 7d9884084927f..8d747c03c11ca 100644
--- a/src/connector/src/source/cdc/external/mod.rs
+++ b/src/connector/src/source/cdc/external/mod.rs
@@ -261,7 +261,7 @@ pub enum SslMode {
 
 impl Default for SslMode {
     fn default() -> Self {
-        Self::Disable
+        Self::Prefer
     }
 }