I have an asp.net application working in https (SSL). This is working well in my local computer and Amazon AWS(production environment).
But when I host this application in office (for testing) some strange things happens.
-
I can see the https in browser and the lock sign.
-
Fiddler also showing that the output is encrypted and shows port 443.
-
But
HttpContext.Current.Request.IsSecureConnectionreturns false -
And
HttpContext.Current.Request.Url.Schemereturns http.
In the office we are using Juniper SSG firewall and TMG 2010 (Forefront Threat Management Gateway 2010). So server receive request through Juniper and TMG 2010. Thanks in advance.
To reduce costs I suspect that the SSL certificate is installed on the TMG Gateway and that this gateway is simply rewriting the request to standard HTTP when passing it to the actual web server. So by the time the request hits IIS and your web application it is a standard plain HTTP request.