Inspect HTTPS Traffic With IDS/IPS

Aug 3, 2007

Is it possible to perform IDS/IPS on traffic that is SSL encrypted? I am setting up a secure Apache reverse proxy with a CISO ASA and a Citrix Netscalers in front of the reverse proxy.

Here's a "diagram" of my environment:
Client --SSL--> Firewall --> Load Balancer --> Reverse Proxy [url] --SSL--> Portal Server [url]

I am trying to find a way to add additional security before traffic reaches the Portal Server. Also is it possible to add mod_security to the reverse proxy, since the traffic to the backend server is encrypted?

View 2 Replies


ADVERTISEMENT

Plesk 12.x / Windows :: How To Set Whole Website To Https And Redirect All Http To Https

Oct 7, 2014

I´ve read that a whole https website might be better for SEO than just a mixed version. So I want to change the whole website to https.

We are using Plesk 12 on Win 2008 R2.
One Website is using DotNetNuke 7.3.2.

How can I automatically set the whole website to https?

What happens to the users that just type domainname.com without http or https.?

What is the right search engine friendly technique to permanently redirect to the https version even when the user is not using the application protocol prefix http/https?

Where can I do the setup in Plesk 12 fro Windows?

Are their any other drawbacks that I have to think over before I do the changes?

View 5 Replies View Related

Apache :: Redirect HTTPS To Another HTTPS Address

Jul 6, 2014

I have set up an Apache web server that has ssl enabled. If I go to https://myserver.com I get the 'it works!' page and the certificate is valid and trusted. If I go to https://myserver.com/myapp that also works (it's an Oracle weblogic deployed java app that I'm fronting with Apache).

I would like to configure Apache so that when a user goes to simply https://myserver.com it automatically directs them to https://myserver.com/myapp rather than showing the 'It works!' page. I have read some documentation and experimented with setting a redirect via the https.conf file and even the ssl.conf file but nothing seems to work. I either get a 404 or simply the 'It works! page.

View 1 Replies View Related

Best Traffic Monitor For High Traffic Sites

Nov 15, 2007

What traffic monitor would everyone recommend for sites that have as many as 5,000 to 10,000 hits an hour?

View 8 Replies View Related

SSL Certificates Https

Jul 11, 2008

My website is currently running on http and the plesk control pannel is running on https

However the certificate for https for the plesk panel is out of date and self signed therefore web browsers promit its not valid.

I want to get a valid SSL certificate for https for Plesk, Client/Billing area and the main website.

I want to do it as easy as possiable (as I'm not one for technical stuff but if it was resoniable I could give it a go)

I dont want a self signed and want to try to go for something free or very cheap.

Any got any suggestions? I've looked around and come up with companys wanting alot of money I did come across another which was free but it was self signed.

View 5 Replies View Related

Http To Https

Mar 7, 2008

Currently I have a URL that has HTTP. This has been given to the public. There is no doubt that they have added this URL to their favorites.

In about 2 weeks, I will be applying an SSL certificate that would add an S to the HTTP (e.g. https)

My questions is: After applying this SSL certificate, which adds an S, will the link saved in my users favorites still work? Or do I have to add some HTML code that will redirect them?

View 6 Replies View Related

Https Instead Http

Feb 5, 2007

I have installed SSL for the domain abc.com, for security reason I'd like make [url]is default for all access, that mean if the visitor type [url]on the browser, it will auto forward to[url]

View 8 Replies View Related

Https And Http

Apr 12, 2007

I am maintaining a site that is totally on a secure folder. I have been asked to make only the things like the cart to be secure and to make the rest of the site non-secure.

there is an https and an http folder on the server all of the site is now on the https folder. I thought all I needed to do is move the pages I wanted to be non-secure to the http folder and then use an absolute address when I needed to refer betweem them.

I called my hosting people (the people who originally developer the site and made it all secure before handing to it me) and asked them about what all I need to do. they said its very complicated because I am dealing with 2 different root directories and didn't offer me much info on how to do it myself instead they just said if I can't figure it out they will do it for a price.

View 2 Replies View Related

Can I Redirect To Https:

Oct 19, 2007

I just installed a RapidSSL cert on www.mysite.com

Works fine if a user types [url]

But what I'd like is if a user types [url] it shows up as secure. I tried a redired 301 in my .htaccess file but that doesn't seem to work.

View 5 Replies View Related

SSL With Links In Https Pages...

Jun 18, 2009

I have an SSL cert installed to have a secure commerce area. Some of the pages have external links to non-secure sites like say [url]The padlock icon breaks and warns that there's unauthorized content. The hosting provider says it's because the external links need to be https links. Obviously that can't be done to a non-secure external site.

So the question is: do external http links break security on a secure https page? If so, is there a work around other than removing external links?

View 14 Replies View Related

HTTPS Not Processing .php .html

Jul 29, 2008

I've just set up HTTPS on Apache (CentOS). However if I try to access the HTTPS site I just get prompted with the save as dialog to download either the .php file or .html. How do I get it to show (and process) it instead, like when accessing normally (non-ssl).

View 7 Replies View Related

Using Htaccess To Redirect From Http To Https

Jun 16, 2009

if there is anyway to redirect my users to https no matter what page they are on using htaccess?

I really don't fancey using full url extentions and changing them on every link on my site. I can get the homepage to redirect to https but not any other.

If there is no way to do this does anyone know the shortest hyperlink to use the redirect?

View 7 Replies View Related

SNI (https/SSL Certificates With No Dedicated IP) Support...?

Aug 22, 2008

Which hosting service currently offer Server Name Indication (SNI) support which allows one to use his/her own SSL certificate to enable https support without a dedicated IP...?

View 1 Replies View Related

SSL / HTTPS Causing Error On My Server

Oct 24, 2009

i have wrong procedure doing to enable my SSL/HTTPS services in my vps.

First i noticed the HTTPS in my services is not running, now i'm looking to google, i found openssl website, then download the latest version and install it into my server and following the instructions, after that, i try to recompile the apache becuase i have a new updates, i found an error ssl and cannot continue to compile because of my last installation i suspect.

View 10 Replies View Related

Default Relative Links Go To HTTPS

Mar 19, 2008

One of the machines we have at LW crashed 2 weeks ago.

we use relative links for pages and images throughout our site, but now in the new machine, every relative link request gets sent to HTTPS instead of a regular HTTP request.

View 1 Replies View Related

HTTPS Problem On Deasoft Server

Dec 9, 2008

I have a reseller account on a Deasoft server (called NS2). Some of my clients can't open a secure connection for cPanel. After I'd made many suggestions (none of which helped) I took my PC to a user's home and tried and sure enough there was no response to the initial packet sent by the PC. This PC works fine at my home.

I then tried accessing another Deasoft server (called NS1) using both my PC and the user's PC and had no problems with either. So it looks like the problem is due to a difference with the setup of these servers rather than a user PC issue.

A trace (using EtherSnoop) showed no response to any attempted https access on NS2. But we had no problems with http or ftp to either server so I doubt it's a firewall block based on the user's address. One possibly significant difference between my connection at home and the users' connections is that I have a fixed IP address and they don't.

The forum software here prohibits me from including URLs here so I've had to record them below in a slightly obscure fashion.

I asked on the local forum and submitted a support ticket but both have been fruitless so far.

The URLs are :
[url]
[url]
Access to NS1 is fine but not NS2.

View 11 Replies View Related

Https Page Hangs For MAC User

Mar 30, 2008

We have recently launched a new website with a SSL homepage which houses our login. Our website moved to a new IP address, therefor we moved the certificate to the new server as well. Thus far, we have had NO problems with the site with the exception of 2 MAC users who's browser hangs when they try to navigate to the site now. They can access other HTTPS sites, and they can access pages on OUR site that are NOT HTTPS, but when trying to browse to our HTTPS Page, the browser hangs. This is not just ONE browser on their MAC, it's EVERY broswer on their machine (Firefox, IE, Safari). It connects, but then doesn't load anything onto the screen. We tried clearing their DNS cache on their machines with no avail. To this point, we are stumped. We have identical machines, with idential OS and browser versions and everything tests fine. It is obviously something on their machine, but we don't know what it is. We have run out of ideas. Any MAC users that can lend a hand here? Is there a way to delete the certificate on the MAC and have it redownload to the user?

View 0 Replies View Related

Does Anyone Know The Mod Rewrite Code To Direct To Www. And Https

Apr 2, 2008

Does anyone know the mod rewrite code to direct to www. and https?

View 3 Replies View Related

Redirect All The Links From Http To Https

Apr 28, 2008

I have to redirect all the links from http to https.

IS there some setting on IIS.

SSL is installed on server.

View 2 Replies View Related

.htaccess Redirect All Pages To Https://www

Jul 17, 2007

I'm not to good with htaccess.

I am able to find information on the 2 items I am looking for separately but not together.

I need all pages on a site to redirect to the www ssl version of the page.

so..
[url] > [url]
[url]> [url]
[url]> [url]

View 3 Replies View Related

SSL: Want To Make A Single Page Https

Aug 30, 2007

Have a domain, and I want to make a single Contact Us/Order page SSL. Have purchased the SSL certificate, put the domain on its own IP and it's ready to go. Now, how do I go about altering the page to be an SSL page. Do I simply call it as [url]? It makes some calls and loads a little SWF contact page from within it's own directory, and then shoots an email out to the contact email.

This will be the only page that ever needs an SSL on the whole site, so no worries in expanding it later.

View 6 Replies View Related

PHP Cannot Include File Only When Accessed With Https

Nov 25, 2007

My PHP script has an include statement. All works fine when I access the script using http. HOWEVER, when I access the exact same page using https, PHP complains that it fails to open the include file. I've checked and the include_path lists the correct dirs in both cases.

View 4 Replies View Related

Apache :: Redirecting From HTTP To HTTPS

May 4, 2015

I keep hearing that redirecting from http to https is not very secure [non-SSL to SSL]. Among other reasons, one reason is that the browser may continue to think it is communicating with non secure server and may not encrypt the data. Is it true? I hope not, I am using the following -

<VirtualHost 12.34.567.89:80>
ServerName www.mysite1234.com:80
Redirect / https://www.mysite1234.com/
</VirtualHost>

View 1 Replies View Related

Apache :: 2.4.4 - HTTPS Very Slow Or Not Responding

Jan 17, 2014

I have a problem with slow Apache 2.4.4. It's only related with https which is in general 5 time slower than the same site via http. I see this difference on the monitoring software which is measuring response time to http and https every 5 seconds. In some cases i got even timeouts in the browser on https while in the same time site is opening over http - slowly but opens always.

Apache runs on Win2k8 Enterprise, Version 2.4.4 x64 - VC10. Server is connected with quite poor internet connection as it's located in Africa. Despite of connection quality http is working properly all the time.

View 19 Replies View Related

Apache :: 404 Not Found Https Setup

Apr 11, 2014

i have setup everything before using ssl without issue for using https url.Now I'm having issues for Apache 2.4.9.

In url https://tomysite.com i get

Not Found

View 7 Replies View Related

Apache :: All Request Redirect To HTTPS

Nov 1, 2014

I've just joined the group and new to Apache/php. I have just assembled a website in Joomla/vertumart and called petslovezone.com.au. I want to redirect all the request such as

1. http://xyz.com to https://xyz.com
2. http://www.xyz.com to https://xyz.com
3. xyz.com. to https://xyz.com
4. www.xyz.com to https://xyz.com

now know I have to change .htaccess "RewriteEngine On" section. What would be the best code to do all the above.

Apache Version2.4.10
PHP Version5.4.32

View 2 Replies View Related

Apache :: 2.2.22 Not Working Via HTTP Only Via HTTPS

Mar 3, 2015

I'm using a turnkey image for smallmachineforum system, installed on amazon aws instance.

In the default configuration I can't use the http version of the site, only the https.

It does not seem to be a network issue, a telnet on port 80 opens.

The server is apache version 2.2.22, on a Debian 3.2.57-3+deb7u2 x86_64

View 2 Replies View Related

Apache :: Redirecting All Subdomains To HTTPS

Jan 21, 2015

Say I have two domains: example.com and example.net.

Upon a http request to example.com, I wish to redirect to https://example.com.

Upon either a http or https request to example.net, I wish to redirect to https://example.com.

Note that for both cases, subdomains should also be redirected, and the change should be considered permanent.

I've seem multiple ways to do so. What is the best way? How do I deal with subdomains when there is a new domain such as example.net to example.com?

I've taken a stab. How to fill in the gaps?

View 1 Replies View Related

Apache :: Redirect Https To Http?

Aug 17, 2013

I am trying to find out if redirecting an https URL to an http URL will still provide the security of the original https? Should the page information for the redirected http page show it as being unencrypted or shouldn't it have the same encryption as the original https?

View 3 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved