Enabling HTTPS AND HTTP for OWA? v.babysteps

I am about to send a CSR off to a Certificate Authority as the first step in setting up secure OWA for my users.  This is the first time I've done this, and I don't want to screw it up.

Can I set up both HTTP and HTTPS access to OWA?  If so, how?  Or is it an either/or proposition?
LVL 1
SteveAsked:
Who is Participating?
 
EfrenMConnect With a Mentor Commented:
Check in IIS  right click on your website root go to properties then directory security - secure communications if you already have a certificate click on edit in there you will see a box saying require secure channel ssl just make sure its not checked, if it is checked it will force ssl .
0
 
aissimConnect With a Mentor Commented:
Efren is correct.....you can make HTTPS available by issuing the cert, and opening port 443, etc. - end users can connect with HTTP or HTTPS. But if the box mentioned is checked (require secure channel), then HTTP will be rejected and users will be forced to use HTTPS.

What many people do, for security's sake, is use redirection so that if a user goes to http://<owasite> they are automatically redirected to https://<owasite>.
There are plenty articles on the net, but here are a few:

http://technet.microsoft.com/en-us/library/aa998359.aspx
http://www.experts-exchange.com/Networking/Misc/Q_21256905.html
0
 
SteveAuthor Commented:
Exactly what I was looking for.  Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.