Can I enable SSL for a universal forwarder (public IP), but not for a local universal forwarder (private IP)?

Hi, Can I enable the SSL for the universal forwarder that will access it through the public ip, but not the forwarder that accesses Splunk from its private ip? Is it possible? Thanks,