Exchange 2013 CU 7 SSL Offloading

I'm having a terrible time of getting this set up.  We need to publish our Exchange services through a Citrix Netscaler, and of course their configuration document only says "configure Exchange for SSL Offloading"

I've tried following this post (and the links in there):

https://social.technet.microsoft.com/Forums/exchange/en-US/055f4114-6e40-4190-ae3e-22b38b7621b5/exchange-2013-sp1-ssl-offloading-broken?forum=exchangesvrdeploy

And I just can't get this working, it constantly redirects to HTTPS.

Does anyone have documentation for configuring SSL Offloading on CU 7 that actually works as expected (and not by using a path all the way to the logon.aspx page)?