Disabling HTTP access to ArcGIS Server

After you have enabled SSL on ArcGIS Server, you may want to use only HTTPS\SSL for all network communication. ArcGIS Server can be configured to automatically re-direct any HTTP request to the HTTPS port. This effectively disables the use of HTTP with ArcGIS Server.

Considerations before disabling HTTP access

Consider the following before disabling all HTTP communication:

• If your ArcGIS Server site has been configured to be accessed through a web gateway, such as the ArcGIS Web Adaptor, you must also configure the web gateway to block or redirect HTTP requests and allow only HTTPS requests.
• You will be unable to access local help documentation from the installed shortcuts, since they are configured to use HTTP in their URLs. As a workaround, you can manually modify the shortcuts to use HTTPS. Keep in mind that this only applies to local help resources, not content hosted on the web by Esri.

To disable all HTTP access to ArcGIS Server, follow the steps below.

Steps:

1. Log in to the ArcGIS Server Administrator Directory. The URL is typically available at https://gisserver.domain.com:6443/arcgis/admin.
2. Navigate to security > config > update.
3. For the Protocol parameter, choose the HTTPS Only option, then click Update.
4. Verify that ArcGIS Server resources cannot be accessed through HTTP.

Note:

It takes the Web Adaptor one minute to recognize changes to the communication protocol of your site.

Legacy:

In previous versions, you were required to reconfigure the ArcGIS Web Adaptor after updating the communication protocol of ArcGIS Server. At 10.2.2, this is no longer necessary.