Disabling HTTP access to ArcGIS Server

After you have enabled SSL on ArcGIS Server, you may want to use only HTTPS\SSL for all network communication. ArcGIS Server can be configured to automatically re-direct any HTTP request to the HTTPS port. This effectively disables the use of HTTP with ArcGIS Server.

Considerations before disabling HTTP access

Consider the following before disabling all HTTP communication:

• If your ArcGIS Server site has been configured to be accessed through a web gateway, such as the ArcGIS Web Adaptor, you must also configure the web gateway to block or redirect HTTP requests and allow only HTTPS requests.
• You will be unable to access local help documentation from the installed shortcuts, since they are configured to use HTTP in their URLs. As a workaround, you can manually modify the shortcuts to use HTTPS. Keep in mind that this only applies to local help resources, not content hosted on the web by Esri.

To disable all HTTP access to ArcGIS Server, follow the steps below.

Steps:

1. Log in to the ArcGIS Server Administrator Directory. The URL is typically available at https://gisserver.domain.com:6443/arcgis/admin.
2. Navigate to security > config > update.
3. For the Protocol parameter, choose the HTTPS Only option, then click Update.
4. Verify that ArcGIS Server resources cannot be accessed through HTTP.

Note:

If you are using the ArcGIS Web Adaptor with ArcGIS Server, you'll need to reconfigure it with your server after performing the steps above. This will update the Web Adaptor's configuration to reflect the changes you made when disabling HTTP access on your site. For instructions, see Configuring the Web Adaptor after installation.