Setting up NAT and DMZ

Hi,I am new to the Sophos world and need some guidance

We have server running IIS with an app running on it that will need to be accessed from the internet. So I need to do two things:

1.) I need to add the server to a DMZ and
2.) The server needs to be set up using NAT to be accessed over the internet using a public IP we have. I'd like it to only allow HTTPS traffic. 

Host is currently set with a static ip 192.168.60.2
DMZ interface is currently assigned 192.168.60.1
Public IP: 68.116.*.*

I've tried DNAT and a couple firewall changes with no luck. Please help!

Thanks