Juniper SSG Firewall - TMG 2010 publishing SSL website issue?

Question

I have an ASP.NET application working in HTTPS (SSL). This is working well in my local computer and Amazon AWS (production environment).

But when I host this application in office (for testing) some strange things happens.

1. I can see the HTTPS in browser and the lock sign.

2. Fiddler also shows that the output is encrypted and shows port 443.

3. But HttpContext.Current.Request.IsSecureConnection returns false

4. And HttpContext.Current.Request.Url.Scheme returns HTTP.

In the office we are using Juniper SSG firewall and TMG 2010 (Forefront Threat Management Gateway 2010). So server receives requests through Juniper and TMG 2010.

Answer 1

Check the TMG publishing rule and make sure you're not connecting to the backend server using plain HTTP.

It's possible to publish a site using an SSL listener but use plain HTTP for connecting from TMG to the server itself. In this case, as far as clients are concerned, the connection is secure. As far as the web server itself is concerned, the connection is unsecure.