diff --git a/app/proxyman/outbound/handler.go b/app/proxyman/outbound/handler.go
index 7f14599d2..586968cbf 100644
--- a/app/proxyman/outbound/handler.go
+++ b/app/proxyman/outbound/handler.go
@@ -188,7 +188,7 @@ func (h *Handler) Dial(ctx context.Context, dest net.Destination) (internet.Conn
 				}
 
 				if securityEngine != nil {
-					conn, err = securityEngine.Client(conn)
+					conn, err = securityEngine.Client(conn, security.OptionWithDestination{Dest: dest})
 					if err != nil {
 						return nil, newError("unable to create security protocol client from security engine").Base(err)
 					}
diff --git a/transport/internet/tcp/dialer.go b/transport/internet/tcp/dialer.go
index 1d12f299c..f09792e5f 100644
--- a/transport/internet/tcp/dialer.go
+++ b/transport/internet/tcp/dialer.go
@@ -25,7 +25,7 @@ func Dial(ctx context.Context, dest net.Destination, streamSettings *internet.Me
 	}
 
 	if securityEngine != nil {
-		conn, err = securityEngine.Client(conn)
+		conn, err = securityEngine.Client(conn, security.OptionWithDestination{Dest: dest})
 		if err != nil {
 			return nil, newError("unable to create security protocol client from security engine").Base(err)
 		}