I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over port 3306) on one of our external servers from our office network, the connection to MySQL needs to be encrypted.

Is it already encrypted, and if not, how can I encrypt it?

I am using tools and scripts which can't use fancy SSH-port-forwards or VPNs... is it still possible?