Network settings for applications serving different content over HTTP and HTTPS

In most cases, when users enter the application's domain name over either HTTP or HTTPS, the same content is returned. However, if you have configured your application server to serve different content over HTTP and HTTPS protocols, you should configure the network settings in FortiAppSec Cloud as described below.

In the following example, Server Balance is turned off, causing all HTTP traffic to route through Port 80, while HTTPS traffic is routed through Port 443.

Endpoints

In Network > Endpoints, or in the Network Settings step of the Web Application Configuration wizard, enable HTTP and HTTPS. Disable Redirect all HTTP traffic to HTTPS.

Servers

FortiAppSec Cloud communicates with your application server over both HTTP and HTTPS protocols when there is only one origin server.

Disabling server balance

After the application is onboarded, Server Balance is enabled by default to apply load balancing algorithm to multiple servers. As only one server is allowed if you want FortiAppSec Cloud to communicate with the origin server over both HTTP and HTTPS, you need to disable Server Balance.

1. In Network > Origin Servers, click the Edit icon.
   
2. Turn off Server Balance. Please note the existing origin servers will all be deleted. You can add one server later.
   
3. Click OK.

Creating server

Add a single server and specify the HTTP and HTTPS ports.

1. In Network > Origin Servers, click Create Server.
2. Refer to Origin Servers to configure server settings. Make sure to specify both HTTP and HTTPS port numbers. If you haven't disabled Server Balance, only one port is allowed to be configured on this page.
   
3. Click OK.