Emby/ Plex (container) server on WAF HTTPS

Hi.  I recently decided to put my Emby server behind Sophos WAF, rather than opening port directly that points to the Emby server docker container.  I believe this is safer?

I was able to set up http.  How do I set up https for this?  

I noticed playback of video/ access to UI behind Sophos WAF is somewhat slower than when it was just behind NAT rule.  Is this to be expected?

Added TAGs
[edited by: emmosophos at 4:56 PM (GMT -8) on 26 Nov 2021]