Cannot Browse the Internet or Use the SBS Console If SSL Is Enabled for All Folders in Default Web Site (225305)
The information in this article applies to:
- Microsoft BackOffice Small Business Server 4.5
- Microsoft Proxy Server 2.0
This article was previously published under Q225305 SYMPTOMS
When you attempt to connect to an Internet Web site, you may receive the following error message:
HTTP Error 403
403.4 Forbidden: SSL required
This error indicates that the page you are trying to access is secured with Secure Sockets Layer (SSL).
In order to view it, you need to enable SSL by typing "https://" at the beginning of the address you are attempting to reach.
Please contact the Web server's administrator if the problem persists.
If the Proxy server is configured to automatically dial the Internet service provider (ISP), it does not attempt to dial when an Internet connection is requested.
Additionally, this error message may appear when you try to start the SBS console.
CAUSE
This behavior can occur if the Scripts virtual directory on the default Web site has been configured to use Secure Socket Layer (SSL). This prevents the client from connecting to the Internet.
Configuring the Admin and Help virtual directories on the default Web site to use SSL prevents the SBS console from starting.
RESOLUTION
If you must configure the default Web site to use SSL, exclude the Scripts, Admin, and Help virtual directories from using SSL. For additional information about how to install Certificate Server and configure SSL, click the article number below
to view the article in the Microsoft Knowledge Base:
218445 How to Configure Certificate Server for Use with SSL on IIS
STATUSMicrosoft has confirmed that this is a problem in Internet Information Server 4.0. MORE INFORMATION
It is a good idea not to alter the default Web site by adding SSL, but rather to create virtual Web sites that use SSL instead. The Web Proxy service is completely dependent on the default Web site, so changes (such as adding SSL, changing the default name, changing the IP address from all unassigned to a specific IP address, and so on) can cause instability in the Proxy service and lead to a number of problems.
| Modification Type: | Major | Last Reviewed: | 11/21/2003 |
|---|
| Keywords: | kbbug kbenv kbnofix KB225305 |
|---|
|