Welcome to ISAserver.org

Automatically convert http to https

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Automatically convert http to https

Page: [1]

Message

<< Older Topic Newer Topic >>

Automatically convert http to https - 7.Feb.2006 3:29:10 PM

bctgroup

Posts: 30
Joined: 29.Nov.2005
From: Paul Welsh
Status: offline

Hi

I publish a secure web site using an RSA certificate. I have installed the certificate on both the web server and the ISA server.

If someone connects using https://www.thesite.com all is fine. When someone tries to connect using http://www.thesite.com they get a 403 Forbidden error saying the page must be viewed over a secure channel.

Some people have difficulty typing https. What I'd like is for all traffic to be automatically sent over https even if the user types http.

Any ideas how I do this?

Here are the details of the rule:

To
- Forward the original host header
- Requests appear to come from the original client

Traffic
HTTPS
HTTP
Notify HTTP users to use HTTPS instead is checked

Listener
SSL Listener
The Listener has HTTP and SSL enabled. It has the relevant certificate enabled.

Bridging
Redirect requests to SSL port is checked. Redirect to HTTP is not.
Use a certificate to authenticate is not checked.

That's about it. Other values are either not used or left at their default settings.

Post #: 1

Featured Links*

RE: Automatically convert http to https - 7.Feb.2006 9:58:42 PM

ferrix

Posts: 363
Joined: 16.Mar.2005
Status: offline

To accept http you will first need a listener to 'pick up the phone' so to speak on port 80. Then you could 'redirect' the clients web browser to the HTTPS version. Performing the redirection of the clients web browser is not a function that ISA 2004 offers out of the box. It can however be done by either using a free error page redirection tool on ISATOOLS.ORG or you can use a low cost and ISA MMC integrated ISA 2004 filter called WebDirect by www.collectivesoftware.com that lets you create client 'redirection' rules (in your single ordered ruleset) and should accomplish what you are asking for. There is an eval available on the collectivesoftware web site so that you can evaluate it yourself. Thanks!

(in reply to bctgroup)

Post #: 2

RE: Automatically convert http to https - 8.Feb.2006 2:54:35 PM

bctgroup

Posts: 30
Joined: 29.Nov.2005
From: Paul Welsh
Status: offline

quote:

ORIGINAL: ferrix

Performing the redirection of the clients web browser is not a function that ISA 2004 offers out of the box. It can however be done by either using a free error page redirection tool on ISATOOLS.ORG or you can use a low cost and ISA MMC integrated ISA 2004 filter called WebDirect by www.collectivesoftware.com

Thanks for the info. I see the Lite version of WebDirect is only $98 so not exactly bank breaking.

Our old ISA 2000 server seemed to accomplish this by itself. Could this have been because it used SSL Tunneling rather than Bridging?

(in reply to ferrix)

Post #: 3

RE: Automatically convert http to https - 8.Feb.2006 3:20:22 PM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Yes - you probably went right to the web server and had an ASP page handling the redirect, instead of Bridging through ISA. This issue has existed since ISA 2000.

(in reply to bctgroup)

Post #: 4

RE: Automatically convert http to https - 26.Jan.2008 5:52:46 PM

sambo

Posts: 12
Joined: 20.Jul.2005
From: Cincinnati, OH
Status: offline

Please correct me if I am wrong but the ISA 2004 Link Translation Filter takes care of http to https translation provided that this Add-On filter is enabled. Type "Link Translation" into the ISA 2004 Help FFI or refer to Tom Shinder's ISA Server 2004 book. This translation filter has many other practical uses especially in light of SharePoint's rising popularity.

(in reply to ClintD)

Post #: 5