Heartbeat communication is blanket sent to the native VLAN and we cannot modify that. I suspect we cannot encrypt it. But, I am pretty sure it is just a SYN/SYNACK with almost no bytes.

Thanks! I have the heartbeat in a specific VLAN do it's already on it's own secured. I'll do a capture but I suspect also there is no data in it. If they had some, they would offer the encryption like for the cluster.