I *think* this is what you're looking for ... you shouldn't need to restart.
If you go to Options --> Security Options --> TLS
You can modify the settings here. I beleive if you set the 'TLS Default' to "Proxy" you'll be all set as the SSL connection will only be established between the BES and the destination server. Also, set the 'Allow HTTPS
Redirections' field to "Yes".