Can we assign an VIP(APP Tier) assigned with an Irule & SSL cert as pool member to another VIP(Web Tier)

Microsoft client access server (CAS) is hosted in app tier and we have an app tier LTM and VIP (this vip is assigned with an redirect Irule for (/owa) and ssl certificate is offloaded on the F5) is configured for this server and it works. Since external users needs to access this server, we want to create a VIP in web tier LTM (for external user) and assign app tier VIP as pool member.

When I tried this, it doesn't work. Backend port and health monitor seems to be active. I am not sure if I need to assign irule and ssl certificate to the web tier LTM VIP? Could some one suggest what needs to be done to make this work?

I can share the config if its required.

Thanks, Srini