Blocking insecure log-in page

Hi Tacobell,

You can insert a custom HTTP header on the HTTPS VS with a custom HTTP profile that has the header to remove set to X-HTTPS and the header to insert set to 'X-HTTPS: 1'. On the HTTP VS, you could do the same with the header to insert's value set to 0.

 HTTP profile for the HTTP virtual server
profile http http_profile_https_0 {
   defaults from http
   header insert "X-HTTPS: 0"
   header erase "X-HTTPS"
}
 HTTP profile for the HTTPS virtual server
profile http http_profile_https_1 {
   defaults from http
   header insert "X-HTTPS: 1"
   header erase "X-HTTPS"
}

Aaron