SSL Proxy to Vmware Connection Server

Hi, I have 2 BIG-IP ( 1 on DMZ 1 on LAN),

 

I have 2 scenarios:

 

For External Users:

 

My flow for External Users that connect to VDI is: Internet > F5 DMZ VIP (VIP type standard) > UAG UAG go to > F5 LAN VIP that LB CS

 

For Internal Users:

 

Clients> same F5 Lan VIP that LB CS

 

CS configured for client certificate request

 

how do I need to configure that F5 forward the certificate request to the client? (for external users and internal users)