Summary

When SSL in enabled at LM tclweb servers, they present a login screen that is properly encrypted with an https:// prefix.  After a user logs in they specifically switch back to a non-encrypted connection (http://).  You may want to know how this can be prevented.

Solution

When SSL is configured, LM performs a redirection to https with the login page. The authentication is done via SSL and the application is put back to http. This is as designed behavior. The way around is to always use the https login URL to stay at https.

With that being said, the is a way that you can stop people from accessing the non-SSL web interface. Follow the steps below to have the old http URL will not work at all.

1. Navigate to Utilities > Administration > Sites > Edit Site
2. Change the URL to web interface to your SSL URL and save.