«

Hello,

I have an IIS 6.0 server behind a Cisco CSS 11506 with SSL offload.

Clients are required to use https. So there is https between the clients
and the load balancer and http between the load balancer the IIS server.

There is a piece of code on the IIS server that is using
HttpContext.Request.Url.Scheme. It is returning http (instead of https). I
am assuming that this is because of the http connection between the load
balancer and the IIS server. Can someone verify this assumption?

Thanks,
David

Looks expected, it is accessed using the http scheme, so it is http not
https...

Try perhaps :

http://www.windowsecurity.com/articl...lications.html

and in particular the "What are the Security Implications of Offloading SSL
?" section...

--
Patrice

"David Brockus" <> a écrit dans le message de
groupe de discussion : A7CD8323-0453-44B9-A9F2-...
> Hello,
>
> I have an IIS 6.0 server behind a Cisco CSS 11506 with SSL offload.
>
> Clients are required to use https. So there is https between the clients
> and the load balancer and http between the load balancer the IIS server.
>
> There is a piece of code on the IIS server that is using
> HttpContext.Request.Url.Scheme. It is returning http (instead of https).
> I
> am assuming that this is because of the http connection between the load
> balancer and the IIS server. Can someone verify this assumption?
>
> Thanks,
> David