EV 11 RPC over HTTP/s? Securing communication

[newtonown]

Hello,

I have a EV11 server. I have a firewall rule to allow both HTTP and HTTPS traffic to it from WAN. When I have HTTP enabled EV is able to pull archived items fine without issue outside my network. However I would rather use HTTPs since its more secure. The link to the EV server when outside the network is HTTPS when you look at the client addon info. 

My question is what kind of encryption does Ev do if at all when communicating with a client outside of my the local network. I would rather have only HTTPs open. 

[JesusWept3]

ALL EV communications from client to server is routed through IIS (HTTP/HTTPS) and not DCOM any more
Communication from internet -> intranet would be RPC over HTTP, so it would still be handled by IIS

Any encryption would be handled by IIS, so if you're not using HTTPS, it would be unencrypted.

Really you should want everything inside and outside your network to use HTTPS, just obviously making sure that you have the correct certificates installed and such so that people aren't prompted with errors

[AndrewB]

EV itself doesnt do any encryption. that's why you have to configure the communication over HTTPS with a certificate.

[newtonown]

Yes i want everything over https. The issue as i am explaining is when i only allow HTTPS traffic from WAN or even internal it blocks EV from being able to retrive items. Is there a setting somewhere for it? 

[AndrewB · Accepted solution]

have a look at this post where it's already been explained in detail by JW:

https://www-secure.symantec.com/connect/forums/how-enable-ssl-enterprise-vault

[newtonown]

Thanks.