topic HTTP redirect at firewall level(currently being done in IIS in General Topics

HTTP redirect at firewall level(currently being done in IIS

msintech — Wed, 10 Jan 2018 19:41:33 GMT

I'm currently doing http redirect at the web server(IIS) and allowing http and https traffic into the web server. Is there a way to do http redirect at the firewall level and that way I only allow SSL traffic and block http coming into the web server. IS it ok to allow http traffic into the web server behind the PAN? I want to know what other are using.

Re: HTTP redirect at firewall level(currently being done in IIS

OtakarKlier — Wed, 10 Jan 2018 22:12:02 GMT

Hello,

The PAN cannot perform the redirect. However when you do it at IIS its still ok. The http traffic goes across and just gets redirected to ssl so nothing sensitive is being transmitted. Of course a scan of the system is always advised to make sure there are no other vulnerabilities.

Regards,

Re: HTTP redirect at firewall level(currently being done in IIS

msintech — Wed, 10 Jan 2018 22:36:35 GMT

Thanks for replying!