client and server ssl profile

Yes it is possible and allows end to end encryption, with the only decyption being on the BigIP.

You create the clientssl profile for client to BigIP connections and assign it to the Virtul Server.

You create the serverssl profile for BigIP to server connections and assign that to the Virtual Server.