Exchange 2013 externally via ARR -> Enforce client certificates?

Hi Guys,

I've setup a test exchange environment which is published via ARR 3.0. It works well. I would now like to start locking it down as it will be on the internet to all addresses

Can I enforce client certificates on the ARR server? I'm unsure if exchange 2013 supports this(we will not be using anything lower than exchange 2013)