Wow folks - thanks - got to work this morning and it was like opening presents with all these responses!
So is the consensus that even with a redirect to https that having port 80 open will allow it to work properly? If so, that will definitely be the way to go.