I have a webserver behind my firewall in a DMZ that I want to secure with SSL. The firewall performs the NAT and translates it to my DMZ's IP address. This works great for http requests (port 80).