Dear Community/Sophos KB maintainers,
I would like to suggest Scenario 6:
502 page - server sent invalid response by using XG WAF
first double check all settings @ XG.
Then check ssl v2 & ssl v3 settings @ server. these should be off.
If not switched off, please do so, restart your apache/iis/server and check again.
Most likely problem is solved.