A user reports that when they visit the company's internal web-based inventory portal, their browser shows a warning that the connection is 'Not Secure' and traffic could be intercepted. The technician confirms the site loads correctly but is served over an unencrypted protocol. Which change should the technician recommend so the portal uses an encrypted connection, and which default port will it then use?