F5 iRule Reverse Proxy, rewrite, redirect

if the https target uses ip that means users will need to allow exception to the untrusted ssl certificate.
http redirect will also change url in browser address bar.

i assume you already have https://company.com already served by f5 vserver.
so, create a new pool and add x.x.x.x:443 as pool member.
then create new Local traffic Policy to use that new pool for /tool then attach the new ltp to the vserver.