As far as the SSL requirement, you can just add a SAN to your certificate on your reverse proxy for the external FQDN of your WAC server.
Make sure you have specified that URL on your WAC using either: New-OfficeWebAppsFarm -InternalUrl "https://internalFQDN" -ExternalUrl "https://externalFQDN" -CertificateName "CertName"
or if you have already created the farm
Set-OfficeWebAppsFarm - ExternalUrl "https://externalFQDN" and restart the services
Follow steps 17 onwards from this article to configure the WAC on IIS ARR http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
Basically
- Create a Server Farm for your WAC
- Move the Rewrite URL to the top
- Match the following pattern ((?:^en-us/|^hosting/|^m/|^o/|^oh/|^op/|^p/|^we/|^wv/|^x/).*)
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer" | Blog
www.lynced.com.au | Twitter
@imlynced