A security engineer at a financial firm must forward log messages from perimeter firewalls to a central SIEM. Auditors require that log data in transit be encrypted and protected against tampering, and that delivery to the collector be reliable so that no messages are silently dropped during network congestion. Which configuration approach on the network devices best meets all of these requirements?