An HTTP reverse proxy is required in your perimeter network for:

The HTTP reverse proxy provides a single discoverable IP address through which external users can download content from the internal Web Components (IIS) Servers. The Web Components Servers in turn use the reverse proxy to download expanded distribution lists, Address Book files, and meeting content for external users. All communication between a reverse proxy and internal Web servers occurs over HTTPS (TLS over HTTP) and therefore is encrypted.

For details about deploying and configuring an HTTP reverse proxy, including configuring your firewall to work with a reverse proxy, see Planning for External User Accessin the Planning and Architecture documentation.