How Redirect browser(client) based on non-negotiable SSL/TLS protocol or cipher

Hi guys,
we have a security requirement wherein we have to  force the browsers accessing our asp.net application hosted on windows server 2012 to have atleast tsl 1.1 , but we don't want to simply block the request, instead we would like to redirect the request
to a unsecured static html page with the instructions on how to get them onto tsl.
can any one help me here?>? actually i found a similar and exactly same thread on stackoverflow but i think that is probably directed towards linux family.   http://serverfault.com/questions/591188/redirect-browser-based-on-non-negotiable-ssl-tls-protocol-or-cipher
please help me guys..
ps: i have posted the same question on IIS forum (http://forums.iis.net/t/1223352.aspx?How+Redirect+browser+client+based+on+non+negotiable+SSL+TLS+protocol+or+cipher+from+IIS)
and got a reply saying that it can be done at windows kernel level(possibly).

Hi,
As far as I know, once SSL handshake fails, no subsequent communication would occur between the server and client.
Therefore, as the way I see it, the goal cannot be achieved.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Similar Messages

  • How Redirect browser(client) based on non-negotiable SSL/TLS protocol

    Hi guys,
    we have a security requirement wherein we required to force the browsers accessing our application to have atleast tsl 1.1 , but we don't want to simply block the request, instead we would like to redirect the request to a unsecured static html page with the
    instructions on how to get them onto tsl.
    can any one help me here?>? actually i found a similar and exactly same thread on stackoverflow but i think that is probably directed towards linux family.   http://serverfault.com/questions/591188/redirect-browser-based-on-non-negotiable-ssl-tls-protocol-or-cipher
    ps: i have posted the same question on IIS forum (http://forums.iis.net/t/1223352.aspx?How+Redirect+browser+client+based+on+non+negotiable+SSL+TLS+protocol+or+cipher+from+IIS) and got a reply saying
    that it can be done at windows kernel level(possibly by making use of
    http.sys, ksecdd.sys and schannel).
    can any one help me here guys.
    Thanks,
    Haroon 

    Hi,
    As far as I know, once SSL handshake fails, no subsequent communication would occur between the server and client.
    Therefore, as the way I see it, the goal cannot be achieved.
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]

  • How to trap client browser window closing thru JSP or servlets

    How to trap client browser window closing thru JSP or servlets?
    Gunjan

    Hi
    Though some JavaScripts may provide you with solutions , yet there is no reliable way to detect the closing of the browser by the servlet. One way to achieve detection of user quitting a session is setting session timeouts ion the server side. This can be done either through the web.xml file or programatically by setting the session.setMaxInactiveInterval().
    Good Luck!
    Eshwar Rao
    Developer Technical Support
    Sun microsystems Inc
    http://www.sun.com/developers/support

  • Client based settings and non-client based settings

    Can I knwo what is the client based settings and what are the non-client based settings.

    Hi,
    Slight error in you question:
    There are 2 settings:
    1. Client specific: These are customising settings which impact only in the client you are making the changes in.  Let us say that in an instance you have 2 clients, 800 and 900.  When you change a client specific setting in 900, it is not reflected in client 800.  This is beacuse the table where this setting is stored contains the client as one of the fields.
    2.  Cross Client settings:  Here, a change in one client is also replected in all the clients in that installation.  Needless to say, the tables for these settings will not have client as one of the fields.
    Cheers

  • How to Use a Certificate for Two Way SSL and another certificate for WS Security Header at Client Console Application(C# Dotnet)

    Hi,
    I want to consume a Java Web service from Dotnet based client Application. The service require one Certificate("abc.PFX") for Two Way SSL purpose and another certificate("xyz.pfx") for WS security purpose to be passed from client Application(Dotnet
    Console based). I tried configuring the App.config of Client application to pass both the certs but getting Error says:
    Could not establish secure channel for SSL/TLS with authority "******aaaa.com"
    Please suggest how to pass both the certs from client Application..

    Hi,
    This problem can be due to an Untrusted certificate. So you need just full permissions to certificates.
    And for more information, you could refer to:
    http://contractnamespace.blogspot.jp/2014/12/could-not-create-secure-channel-fix.html
    Regards

  • RH8 browse sequence based on TOC not working as expected

    I have several standalone projects for which RoboHelp's browse sequence tool correctly generates the browse sequence based on the TOC using a book level of 0 (zero) so that it picks up everything in order.  If a project has books A and B (which are not themselves topics), and each book has two subtopics, A1, A2, B1, B2, the TOC-based browse sequence is A1, A2, B1, B2.  For a project I inherited (originally designed as 40 separate merged projects that I combined into a single .xpj project), "books" A and B for the example above are also topics.  When I generate the browse sequence based on the TOC using zero for the book level, instead of getting A, A1, A2, B, B1, B2, I get A, B, A1, A2, B1, B2.  The TOC runs through all 1st level items first, cycles back through all 2nd level item, then 3rd level, etc.  Has anyone seen this before?  Any ideas how to fix it?  Does the problem have anything to do with the fact that the "books" in this project are also "topics"?

    Create a new TOC and make it a copy of the existing TOC.
    Then remove the topics from the books and try again with the browse sequence.
    I don't know that will fix it but it is what I would try first.
    See www.grainge.org for RoboHelp and Authoring tips
    @petergrainge

  • Change background color of textbox based on non-visible value

    Hello,
    I have a 10g master - detail form. I was wondering how can I change background color of text box (NAME) based on non-visivle item (MODIFIED_BY) value.
    So far, I have created two visual attributes and have put following code on "WHEN_NEW_BLOCK_INSTANCE" trigger
    if( :main.MODIFIED_BY = 'COCO') then
         SET_ITEM_PROPERTY('main.NAME',VISUAL_ATTRIBUTE,'VA_BLUE');
    else
         SET_ITEM_PROPERTY('main.NAME',VISUAL_ATTRIBUTE,'VA_RED');
    end if;
         But, it always goes to "ELSE" part and make RED color for all records. Could you please help me with this?
    Thanks.

    Got it.
    Post Query trigger on block
         if (:main.MODIFIED_BY ='COCO') then
              set_item_instance_property('main.NAME',current_record,visual_attribute,'VA_BLUE');
         else
              set_item_instance_property('main.NAME',current_record,visual_attribute,'VA_RED');
         end if;Thanks

  • How to use CLIENT-CERT authentication?

    Hi,
    I would like to know how to use client authentication.
    I used a web application with CLIENT-CERT authentication.
    And I accessed to the application from browser, then I had the following error
    message:
    Incorrect or missing client certificate.
    I used OpenSSL to generate keys.
    Could you tell me the information of the setting?
    Especially, I don't know theentry of CertAuthenticator.
    Could you tell me?
    Regards,
    Kuniaki Hagiwara - HP Japan

    Thank you for your response.
    Yes we have added the client certificate file (.pfx) in the Firefox browser Certificate manager / Store. It's also showing the certificate in the View Certificate window. We could not resolve it yet.

  • Print Check-Copy (Non-Negotiable) after every check print

    We are implementing Std. R12.0.6 AP Check Printing.
    I've designed standard BI Publisher RTF to print the Check and Check-Copy without any issue.
    My RTF Template has Check design on first page and Check-Copy (Non-Negotiable) on second page of RTF. Std. Conc. Prog. Payment program FORMAT PAYMENT INSTRUCTIONS automaticlly will be printnig the Checks after paying the Vendor, there my RTF is being used for printing through PDF.
    Issue is Both Check & Copy are by default getting printed from Tray#3. But the requirement is Check to be selected from Tray#2 and its Check-Copy should be selected from Tray#3.
    Note: output PDF is NOT considering the Print setups made in RTF.
    My question is:
    (1) How can we Print Checks from (Check Stock) Tray#2 and Checks those Copies (which are Non-Negotiable) from
    Tray#3

    Hi,
    Check printing is a different scenario in Oracle, since the concurrent program is launched as a part of the payment process.
    If the concurrent program is submitted manually then we could have manipulated it by wrapping in a different program and then calling two different concurrent programs having its output from two different trays, but in check printing scenario we don't have a work around.
    By modifying the seeded code you should be able to achieve this: [Non recommended solution]
         1. Create a wrapper program [call seeded check printing program (program 1) then a custom program (program 2), program 2 will print the non negotiable document ]
         2. In the seeded code modify the concurrent program call to your wrapper program call.
    NOTE: EVERY TIME WHEN A PATCH IS APPLIED TO AP OR IBY modules, care should be take to reflect the custom change.
    Hope it helps, Thanks!
    Please find some useful references in this regards:
         How To Set The Printer Tray When Sending Concurrent Output To Printer [ID 740539.1]
         How to Specify a Printer Paper Tray With Pasta [ID 241086.1]
         How to Use Hewlett-Packard Printers with Multiple Paper Trays When Printing Requests. [ID 147712.1]
         What are the Common PCL5 Printer Commands for HP Laser jet Printers [ID 135990.1]
         How To Setup Custom Pasta A4 Print Styles And Drivers [ID 763274.1]
    Regards,
    Yuvaraj

  • Spliting a string based on Non Printable character

    Hi,
    i have a requirement where i have to split a String based in non printable character " MYU(ascii: 230);
    es: ""This is to test æ raaaaaaaaaaaaaaaaa æ AAA010224544 æ 7118288888 æ
    æ is a not printable character and its ascci is 230..
    iam getting that string from form how to split it in Java..
    Any suggestions...?

    One of many ways
        String initString = "This is to test æ raaaaaaaaaaaaaaaaa æ AAA010224544 æ 7118288888 æ";
        String[] tokens = initString.split(String.valueOf((char)230));
        for (String string : tokens)
          System.out.println(string.trim());
        }

  • Unable to activate Client Profile within Client-Based Groupware Integration

    Experts - Please help us!
    We are trying to activate a new Client Profile wiithin Client Based Groupware Integration. We are receiving an error message that 
    "Multiple profiles not allowed for same role, country, language combination."
    We believe we are receiving this message because there was an incomplete profile already saved in this table. We can not move forward without completing that record, however it is not editable for us.
    Has anyone run into this problem before? Any ideas how we can move forward? I would appreciate any information anyone is able to provide.
    Thank you!
    Jami Shircel

    I have one idea If you want to do this for your future records then you should create a specific transaction type meant only for GWI and assign it to groupware spro settings and that transaction type should not be used from SAP CRM WebUI. In this way all the appointment/task created in Outlook have that special TType and can be differentiated from others. Will that be of any use ?
    Rgds,
    Shobhit

  • How much my client had to pay in terms of licences ? If I sell an applicati

    How much my client had to pay in terms of licences ? If I sell an application made by myself to them?
    I love apex!

    If it works on Oracle Express Edition, the license charge from Oracle is $0
    If it is something larger than Oracle Express Edition, check out the prices on http://store.oracle.com for the maximum, non-discounted, list price. Remember that very few pay list price.

  • Redirect from client provision to origin url

    hello
    Does anyone know if there is a way to redirect a user to home page from client provision portal?
    we using wired solution.
    the client PC have web browser automatically opens to home page when employees log in. and since we have posture configured to check the antivirus, the web browser be redirected to client provision portal. we would like to have the user redirected to the corporate home page after successfully NAC agent check.

    We finally used our custom login module to solve this.

  • Client Based Database System

    I'm trying to come out with a design for a client-based database system. i wanna create at least 20 databases all linked to one main server and i can make updates whenever i want either manually or thru the update table that will update automatically all the other databases.
    each client can look other's information on the server and get access to it as well as clients will get the ability to communicate thru the server or sub-servers within the network.
    im really confused myself how to start this and what will be the ideal shema or design to start off with.
    i d really appreciate any hints guys.
    thanks

    If the goal is disaster recovery, you want to be looking into something like DataGuard to provide a hot standby. Basically, you take archive logs from the primary, copy them to the standby database running in a physically separate data center, and apply the logs to the standby. In the event of a failure on the primary, you simply transition over to the hot standby database. You can configure DataGuard in a variety of modes, including zero data loss (though there will be perforamance and availability implications for this sort of setting).
    I don't understand the second part of your question.
    how are the tables gonna be structured? This will depend entirely on your application. You don't need anything special in your data model to use DataGuard.
    because this is a client based application...so it requires an updatable table or sourceI don't follow this at all.
    can i get some details or a shema that shows how to put these tables togetherNor do I follow this
    let's say we have one main server or source and only two other client applicationsWhat do you mean by "two other client applications"? Do you really mean applications (i.e. a collection of J2EE, .NET, PHP, etc components)? Or are you coming back to a multiple database setup with replication?
    Justin
    Distributed Database Consulting, Inc.
    http://www.ddbcinc.com/askDDBC

  • Contact Synchronization - Client-Based Groupware Integration - SAP Library

    To add a comment, please log in or register on the top of this page and choose Reply. Please write your comment in English.
    You can also go back to the SAP help page.

    Hi Shobhit,
    Thanks for you help.
    I have the Active X settings how you say.
    I'm using Lotus Notes 8.5
    I checked the customizing, and we have the Settings for Client-Based Synchronization
    DEFAULT_APPT_PROC_TYPE = Z000
    DEFAULT_APPT_TEXTTYPE = A002
    The transaction type Z000 is a copy the 0000.
    When I create a activity in SAP CRM and press the  synchronization button, the system creates a activity at the lotus notes. But when I create a activity in lotus notes, the system doesn't create the activity at the SAP CRM.
    Best regards,

Maybe you are looking for