Redirects from the https to http/

[k.lapczuk]

In my setup I have CSS11503 with SSL accelerator. It takes off the encryption on VIP and forwards the traffic to the port 80 to the server farm. The problem is that sometimes, the servers give to the client link with VIP address and http (this is Outlook Web Access). When client receives that link it cannot handle it with encryption, and communication stops. Is there any workaround to convert all the http links to https on the CSS?

Regards,

Krzysztof

[skumar1969]

If I understand you correctly, you are using a single-armed-CSS topology to connect both the servers and the clients onto a CSS single interface?

If so, you need to have the 'client NAT' configured inorder to avoid servers communicating directly to the browsers bypassing CSS. Use 'destination nat' under the source group.

[Gilles Dufour]

Krzysztof,

the only thing you can do is use urlrewrite to rewrite redirect sent by a server.

The CSS will convert the HTTP// into HTTPS//.

But that only works for redirect.

If your server sends pages that contain explicit url like http://path/... this should be changed into implicat url like /path/... so the browser can continue using HTTPS or HTTP as needed.

Regards,

Gilles.