Re: force https

From: Paul Kurczaba (seclists_at_securinews.com)
Date: 07/12/05

  • Next message: Micheal Espinola Jr: "Re: force https" 
    Date: Tue, 12 Jul 2005 13:51:04 -0400
To: Leon <roastin@yahoo.com>

    1) Open the IIS Manager
    2) Right click on the domain, then click properties
    3) Click on the "Directory Security" tab
    4) In the "secure communications" group box, click the "Edit" button
    5) Check the box that say "Require secure channel (SSL)"
    6) (Optional, buy HIGHLY recommended) - To require 128 bit encryption,
    check the "Require 128-bit encryption"

    -Paul

    Leon wrote:
    > Hello,
    >
    > I have a web-based frontend for an application that
    > users will be accessing. It can use http or https. I
    > would like to allow only https. This is a more
    > relaxed company so it will be harder to enforce a
    > management policy (as in dont do this do this) so I
    > would like to enforce this through the use of
    > techonlogy. I know i could set a router acl to permit
    > only https to the server but this seems kind of like a
    > kludge (first off it wont prevent people on the same
    > subnet from doing what they want). How can I
    > configure IIS to only except https connections?
    >
    > Thx,
    >
    > Leon
    >
    > __________________________________________________
    > Do You Yahoo!?
    > Tired of spam? Yahoo! Mail has the best spam protection around
    > http://mail.yahoo.com

  • Next message: Micheal Espinola Jr: "Re: force https"

    Relevant Pages

    • Re: SSL
      ... How did you get the Server Certificate? ... what settings do you have in the "Secure communications" dialog box - ... SSL, without the "HTTPS" prefix I receive the following ... This is good, except when I add the "HTTPS", the browser ...
      (microsoft.public.inetserver.iis.security)
    • Re: Writing to IIS virtual directory
      ... My sources told me that the one built into IE supports HTTPS while the one ... HTTPS support depends. ... and one is built into Windows. ... >> a website or folder using the IIS Manager? ...
      (microsoft.public.inetserver.iis)
    • Re: Owalogon.asp not loaded
      ... OWA works fine in https, just the FBA is making me some troubles. ... process - if it is not working properly, then the FBA setting will not ... Integrated Authentication enabled in IIS Manager. ...
      (microsoft.public.exchange.clients)
    • "Cannot find server or DNS Error" with https
      ... I'm having trouble getting https working on my IIS 6 server. ... certificate with no trouble. ... In the IIS Manager I brought up the Properties ...
      (microsoft.public.inetserver.iis.security)
    • RE: force https
      ... 1.Open the Internet Service Manager, then open the Properties for your ... Click Edit in the Secure Communications ... It can use http or https. ... Mail has the best spam protection around ...
      (Security-Basics)