Dev team wants SSL to terminate at the NSX LB and then to initiate another

SSL session from LB to the pool servers at 8443. In the past I've used

passthrough and my first attempt is giving me a

502 Bad Gateway

The server returned an invalid or incomplete response. 

Do I need to configure "Pool Side SSL" in the application profile used by the VIP?

Any other tips for 443 to the VIP and 8443 on the back end?

Thank you!