The CSS11500 has an optional SSL module.
This will let the CSS decrypt/encrypt traffic on behalf of the servers.
If you don't have the CSS11500 or don't have the SSL module, you can
use an SCA (Secure Content Accelerator).
The CSS will redirect the traffic to the SCA which will decrypt it and send it back to the CSS.
Gilles.