HTTP to HTTPS Redirection on FortiADC 200D

[menderIT]

Hello. I have a FortiADC 200 D v4.0.0,build0122,140606

It's configured for Load Balancing for two VMWare Horizon View Connections Servers. Clients browse to https://<Virtual IP>

and the FortiADC directs the connections to the two View Connection Servers.

We want http connections to the view servers to be redirected to https.

When you connect directly to the individual View Servers using http://<view server IP>, the https redirection is automatic, but when you try to do http://<virtual IP> you just get page cannot be displayed. I tried creating a separate virtual server for pot 80 instead of 443, but that doesn't change anything. Is there a way to get this working?

Thank you.

[rgracioli_FTNT]

Hi, this is supported using scripts. Please upgrade to the latest version 4.3.2, then create a virtual server on port 80 and apply the script to it (see below). It will send redirect message back to the client and it will then reconnect with

https, which will then match the existing virtual server that you have on port 443.

-- Redirect HTTP to HTTPS when HTTP_REQUEST{ host = HTTP:header_get_value("Host") path = HTTP:path_get() HTTP:redirect("https://%s%s",host,path); }   More information on scripting: http://help.fortinet.com/fadc/4-3-2/olh/index.html#page/FortiADC_Handbook/appendix_scripts_21_01.htm...

[menderIT]

Thanks rgracioli.  I don't have an active support contract with Fortinet so I can't get the latest firmware. I was hoping that redirection was possible using the http rewrite (or redirect) options under Server Load Balancer > Content Rules > Content Rewriting Rules. If not, we might have to get support or find the firmware somewhere else.