Security Basics mailing list archives

Re: force https


From: security () surefoot com
Date: Mon, 11 Jul 2005 16:09:16 -0600

Hi Leon

On Thursday 07 July 2005 08:17, Leon <Le> wrote:
Hello,

I have a web-based frontend for an application that
users will be accessing.  It can use http or https.  I
would like to allow only https.  This is a more
relaxed company so it will be harder to enforce a
management policy (as in dont do this do this) so I
would like to enforce this through the use of
techonlogy.  I know i could set a router acl to permit
only https to the server but this seems kind of like a
kludge (first off it wont prevent people on the same
subnet from doing what they want).  How can I
configure IIS to only except https connections?

Thx,

Leon

You could just simply forward the http server to the https service (in IIS) - 
this way they can use whatever they want, it'll always end up being https.

J


Current thread: