how to force HTTPS communication continue as HTTPS

Hi,

 

we've an issue about HTTP /HTTPS access to our web application. Briefly, we've a WEB server and F5 LTM in front of it. both HTTP and HTTPS vip configuration is available for that WEB application on LTM.

 

 

users can access by using both of them, HTTP or HTTPS. in some cases, some users access by using HTTPS so they login the page. but after they login by using HTTPS they change their URL from HTTPS to HTTP and continue to communication with WEB server and on same logged in page.

 

 

we need to force users not to be change their URL after log in. or we need to force users to use HTTPS when they login the web page.

 

how can we do that?

 

 

regards.