Hello, Alexis.
Yes, you need to have a network module that supports MACsec on both 3560-X to have a two way encryption. What network module are you already using on your 3560-Xs? Let me know if you have other concerns or e-mail (adawa@cisco.com) me directly. Kind regards.