Http traffic to https

i_maddy — Thu, 22 Jul 2021 07:03:52 GMT

Hi Guys
Can we redirect someone trying to access http://www.xxx.com to https://www.xxx.com ( port 80 to 443 ) ?

If we are using Dest NAT for https://www.xxx.com ?

Thanks

Re: Http traffic to https

michelealbrigo — Thu, 22 Jul 2021 09:22:12 GMT

Quick answer: bad idea.

Long answer 1: it would probably confuse the browser, unlike an "HTTPS-only like" browser extension, which would do the same thing (in a non-centralized fashion, of course) while keeping the browser aware of the redirection

Long answer 2: a PAN firewall seems to be able to "express" that kind of DNAT rule, should you want to try

Possible solution:
- hijack the DNS domain and point it to an IP of yours (PAN dns-proxy should be able to do that with a static entry, in case you're using it)
- set up a "dummy" http-only web server with an HTTP/301 catch-all page that points to the https server (bonus point: implement a rewrite that keeps the URL)
- DNAT on firewall so that https to YOUR dummy web server is DNAT'ed to the original one

topic Re: Http traffic to https in General Topics

Http traffic to https

Re: Http traffic to https