Secure Mobile Access 100 10.2 Administration Guide

Technical Documentation>  Appendices>  Secure Mobile Access Security Best Practices>  Additional Configuration Recommendations for Security Best Practices>  Enable HTTP Strict Transport Security (HSTS) for SMA
Table of Contents

Enable HTTP Strict Transport Security (HSTS) for SMA

This feature forces the connection to be HTTPS and does not allow HTTP connections. Without this, a user could connect to the portal using an HTTP connection to authenticate, then the appliance would convert the session to HTTPS.