Disabling HTTP access to ArcGIS Server
In this topic
After you've enabled SSL on ArcGIS Server, you may want to use only HTTPS\SSL for all network communication. ArcGIS Server can be configured to automatically re-direct any HTTP request to the HTTPS port. This effectively disables the use of HTTP with ArcGIS Server.
Considerations before disabling HTTP access
Consider the following before disabling all HTTP communication:
- If your ArcGIS Server site is configured to be accessed through a web gateway, such as ArcGIS Web Adaptor, you must also configure the web gateway to block or redirect HTTP requests and allow only HTTPS requests.
- You will be unable to access local help documentation from the installed shortcuts, since they are configured to use HTTP in their URLs. As a workaround, you can manually modify the shortcuts to use HTTPS. Keep in mind that this only applies to local help resources, not content hosted on the web by Esri.
To disable all HTTP access to ArcGIS Server, complete the following steps:
- Log in to the ArcGIS Server Administrator Directory. The URL is typically available at https://gisserver.domain.com:6443/arcgis/admin.
- Navigate to security > config > update.
- For the Protocol parameter, choose the HTTPS Only option, and click Update.
- Verify that ArcGIS Server resources cannot be accessed through HTTP.
Note:
It takes ArcGIS Web Adaptor one minute to recognize changes to the communication protocol of your site.
Legacy:
At 10.2.1 and earlier versions, you were required to reconfigure ArcGIS Web Adaptor after updating the communication protocol of ArcGIS Server. At 10.2.2 and later versions, this is no longer necessary.