RE: force https

["Mutallip ABLIMIT" <mutax () insi co jp>]

Hi Leon

You can do it by,

1.Open the Internet Service Manager, then open the Properties for your
website.
2.Click the Directory Security tab. Click Edit in the Secure Communications
section.
3.Select Require Secure Channel (SSL).

Hox !

---
Mutellip ABLIMIT
@INSI


-----Original Message-----
From: Leon [mailto:roastin () yahoo com]
Sent: Thursday, July 07, 2005 11:18 PM
To: security-basics () securityfocus com
Subject: force https


Hello,

I have a web-based frontend for an application that
users will be accessing.  It can use http or https.  I
would like to allow only https.  This is a more
relaxed company so it will be harder to enforce a
management policy (as in dont do this do this) so I
would like to enforce this through the use of
techonlogy.  I know i could set a router acl to permit
only https to the server but this seems kind of like a
kludge (first off it wont prevent people on the same
subnet from doing what they want).  How can I
configure IIS to only except https connections?

Thx,

Leon

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com