For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ymoreau_151858's avatar
ymoreau_151858
Icon for Nimbostratus rankNimbostratus
Apr 24, 2014

how to code a policy to force a web server to answer with https instead of http ?

I request an URL like this : https://FQDN... and the web server respond "http://FQDN..." I am new with F5 technologie and I don't know how to use a policy to modify the server response...  
BIG-IP Access Policy Manager (APM)
deployment
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Apr 24, 2014

you mean response from bigip to client, don't you?

 

if yes, you may use redirect rewrite setting in http profile in case of http redirection (location header) and stream profile in case of message body.

 

sol14775: Configuring an HTTP profile to rewrite URLs so that redirects from an HTTP server specify the HTTPS protocol (10.x and 11.x)

 

http://support.f5.com/kb/en-us/solutions/public/14000/700/sol14775.html

 

sol8115: Overview of the Stream profile

 

http://support.f5.com/kb/en-us/solutions/public/8000/100/sol8115.html