We are going to start a closed BETA for the S/MIME plugin this week. Send us a DM when you want to join (not a lot effort required)!
The Zarafa server use by default port 236. To use an encrypted connection you need to enable port 237 and create ssl certificates.
The webaccess runs on the a default Apache webserver, so port 80 or 443.