Is the physical network layer between the 2 agencies private? Is it a VPN, or some tunnel variant?

If so, then the encryption layer/privacy layer is in place and I would not worry about it. If its not, then the simplest method is to get a secure link between the 2. I would never advocate having a database engine provide that type of security. that is a networking issue all day long.