HOW TO Automate http to https Redirection of Web Interface for XenApp

By Rafi Ahmed On September 27, 2008 · Filed Under Citrix, HOW TO, Microsoft, XenApp

Enterprise customers will often make one of the following choices:

• Leave the Web Interface homepage as an unsecured URL, ergo with the http:// prefix

• Force users to remember the https:// prefix to the Web Interface URL

• Redirect the Web Interface homepage from an http:// URL to an https:// URL

There are associated risks involved with each of these choices. Passwords will be transmitted over the network in clear-text if the Web Interface homepage is left unsecured (with an http:// prefixed URL).Forcing users to remember the https:// prefix to a secured URL may require end user training and result in additional help desk calls. The choice made by many Enterprises is to redirect the Web Interface homepage to a secured URL.

How it Works

The end user opens their web browser and types the unsecured URL to the Web Interface server, such as http://citrix.itgeeeks.com.
Before being presented with the Web Interface login screen, the end-user is redirected by the IIS server.
The IIS server will redirect the end-user to a secured URL.
The secured URL is populated in the end-user’s web browser.
The end-user is now presented with the secured URL without being prompted for additional information. This will ensure that the end-user’s credentials are encrypted using SSL.

Web Interface Redirection Configuration

Default Web Site Modifications

Click Start >> Programs >>Administrative Tools >> Internet Services Manager and navigate to Default Web Site
Right-click Default Web Site and select Properties
Select the Web Site tab and modify the TCP Port from the default value of 80. This should be changed to a higher port not currently in use on the web server. This example will use TCP Port 4444.

Click Apply and then click OK.

Redirection Web Site Creation

Open Windows Explorer and create a folder in the %SYSTEMROOT%\Inetpub directory called wwwroot1.
In the wwwroot1 folder create a file called Default.htm.
In the Internet Services Manager window, right-click the web server icon on the left-hand windowpane and select New >> Web Site.
This will launch the Web Site Creation Wizard; click Next to continue.
In the Web site description textbox enter Redirection and click Next.
When prompted for the IP Address and Port Settings, accept the default values and click Next; ensure the TCP Port is set to 80.
When prompted for the Web site home directory, enter the path to the wwwroot1 folder created in the first step and then click Next.
Accept the defaults on the Web Site Access Permissions screen and then click Next.
Click Finish.
The newly created website should look like the image below.
Double-click the Default.htm page in the right-hand windowpane of the Internet Services Manager console.
Tick the A redirection to a URL radio button.
Enter the URL to the secured Web Interface website in the Redirect to textbox. Such as: https://citrix.itgeeeks.com
Click Apply and then click OK.