I've configured IIS 7 to require SSL. Can I automatically redirect non-SSL requests to be encrypted?

For example, if a user types in http://domain.example, can IIS redirect the request to https://domain.example rather than display the 403 error page?

3 Answers 3


There are a few ways you can do this but if you have the URL Rewrite Module installed, it's fairly easy and a good way to do it.

You can paste the below configuration into your site's web.config file (enclosed in the <system.webServer></system.webServer> section)

   <rule name="https redirect">      
      <match url="(.*)" ignoreCase="false" />     
            <add input="{HTTPS}" pattern="off" ignoreCase="false" />      
      <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}{REQUEST_URI}" />    

OR you can use the IIS's UI to make a new rule like in the below screenshot.

Screenshot of IIS rewrite rule for redirecting http traffic to https.

  • 1
    What does the off signify? this answer works btw
    – Dez Udezue
    Apr 6, 2017 at 13:05
  • Ah! What you gave for the web.config was perfect. I put that in my configs and everything went exactly how I wanted. I know we aren't supposed to say thanks in comments, so I'm doing by saying that it works wonderfully!
    – bgmCoder
    Jun 6, 2022 at 14:59

You could also use UrlRewriter.NET. The rules to use with that, look like this:

    <if header="HTTPS" match="^OFF$">
        <redirect url="(.*)" to="https://yourdomain.example$1"/>

First, you need to disable 'Require SSL' in SSL Settings. Then you can follow Scott's solution.

RuslanY Blog's blog has a bunch of useful rules for IIS: 10 URL Rewriting Tips and Tricks


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.