For hosts that support SSL/TLS connections (typically these will be TN3270 or TN5250 hosts), check this to connect in TLS 1.0 mode (the default).

 

You should also change the Telnet Port to 992 or to the port your host uses, as port 23 is normally not used for TLS connections.