{"id":19470,"date":"2023-07-20T08:34:37","date_gmt":"2023-07-20T12:34:37","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19470"},"modified":"2023-07-20T08:34:37","modified_gmt":"2023-07-20T12:34:37","slug":"scom-webconsole-http-redirect","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/","title":{"rendered":"SCOM WebConsole HTTP Redirect"},"content":{"rendered":"
\"Detour<\/a>
Detour sign, redirect ahead<\/figcaption><\/figure>\n

 <\/p>\n

Use this post when the SCOM WebConsole gets flagged for HTTP Redirect.\u00a0 The IIS configuration is pretty easy to set up.\u00a0 When your Security team contacts you to resolve VulnID 121040<\/a>, the steps below should resolve the compliance finding.\u00a0 Use the Microsoft learn site<\/a> for more details.<\/p>\n

 <\/p>\n

 <\/p>\n

Add HTTP Redirect role from Server Manager<\/strong><\/h1>\n

Time to Configure ‘SCOM WebConsole HTTP Redirect’<\/p>\n

RDP to server, open Server Manager<\/p>\n

Click on Manage on top right<\/p>\n

Click Next on the ‘before you begin popup’<\/p>\n

\"Server<\/a>
Server Manager splash screen<\/figcaption><\/figure>\n

 <\/p>\n

Click Next<\/p>\n

\"Server<\/a>
Server Manager Role Installation Type popup wizard<\/figcaption><\/figure>\n

 <\/p>\n

Click Next<\/p>\n

\"Server<\/a>
Server Manager Destination Manager screen<\/figcaption><\/figure>\n

 <\/p>\n

Expand the ‘Web Server’ drop down menu<\/p>\n

\"Server<\/a>
Server Manager Roles<\/figcaption><\/figure>\n

 <\/p>\n

Expand Web Server drop down menu<\/p>\n

Expand Common HTTP Features<\/p>\n

Check box for HTTP Redirection<\/p>\n

\"Server<\/a>
Server Manager Roles expanding Web Server for HTTP Redirect<\/figcaption><\/figure>\n

 <\/p>\n

Click Next<\/p>\n

\"Server<\/a>
Server Manager HTTP Redirection check box selected<\/figcaption><\/figure>\n

 <\/p>\n

Click Next at the Features tab<\/p>\n

\"Server<\/a>
Server Manager Features window<\/figcaption><\/figure>\n

 <\/p>\n

Click Install to install the feature<\/p>\n

NOTE the checkbox to ‘Restart if required is NOT selected’<\/span><\/p>\n

Most change processes don’t allow this on the fly (unplanned outage)<\/p>\n

\"Server<\/a>
Server Manager Selections window<\/figcaption><\/figure>\n

 <\/p>\n

Wait while the feature(s) install<\/p>\n

Click Close once complete<\/p>\n

\"Server<\/a>
Server Manager feature install in progress<\/figcaption><\/figure>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

Setup Redirection in IIS Manager<\/strong><\/h1>\n

Open\u00a0IISManager<\/p>\n

NOTE If IISManager was open before the feature was closed, exit and open IISManager again.\u00a0 \u00a0IISManager refresh does NOT make HTTP Redirect reappear (even if restarting IIS service).<\/span><\/p>\n

 <\/p>\n

Click on your webServer > Double click on HTTP Redirect<\/p>\n

\"IIS<\/a>
IIS Manager with HTTP Redirect<\/figcaption><\/figure>\n

 <\/p>\n

\"IISManager<\/a>
IISManager HTTP Redirect Default splash screen<\/figcaption><\/figure>\n

 <\/p>\n

Check the ‘Redirect requests to this destination:’ check box<\/p>\n

Enter the WebConsole URL for your installation.<\/p>\n

NOTE SCOM default WebConsole URL is http:\/\/<webserverName>\/OperationsManager<\/p>\n

Check the two (2) boxes for Redirect behaviors<\/p>\n

\"IISManager<\/a><\/p>\n

IISManager HTTP Redirect configuration screen<\/p>\n

Click Apply<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

Recommend restart\/reboot of server (off hours) to apply configuration before having Security team scan server.<\/p>\n

 <\/p>\n

 <\/p>\n

Verify HTTP Redirect after reboot<\/strong><\/h1>\n

After reboot, verify current settings (shown are default)<\/p>\n

Click on ‘Default WebSite’ dropdown > Select HTTP Redirect<\/p>\n

\"Verify<\/a>
Verify HTTP Redirect is configured in IIS Manager<\/figcaption><\/figure>\n

 <\/p>\n

Contact Security team to re-scan server<\/p>\n

Happy mitigating!<\/p>\n","protected":false},"excerpt":{"rendered":"

  Use this post when the SCOM WebConsole gets flagged for HTTP Redirect.\u00a0 The IIS configuration is pretty easy to set up.\u00a0 When your Security team contacts you to resolve VulnID 121040, the steps below should resolve the compliance finding.\u00a0 Use the Microsoft learn site for more details.     Add HTTP Redirect role from … Continue reading “SCOM WebConsole HTTP Redirect”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,5,636,530,502],"tags":[643,644,611,342,601,645,536],"class_list":["post-19470","post","type-post","status-publish","format-standard","hentry","category-administration","category-best-practice","category-iis","category-scom","category-security","tag-http","tag-http-redirect","tag-iis","tag-scom","tag-scom-web-console","tag-server-manager","tag-web-console"],"yoast_head":"\nSCOM WebConsole HTTP Redirect - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SCOM WebConsole HTTP Redirect - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-20T12:34:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour-200x300.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"SCOM WebConsole HTTP Redirect\",\"datePublished\":\"2023-07-20T12:34:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/\"},\"wordCount\":472,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Detour-200x300.jpg\",\"keywords\":[\"HTTP\",\"HTTP ReDirect\",\"IIS\",\"SCOM\",\"SCOM Web console\",\"Server Manager\",\"web console\"],\"articleSection\":[\"Administration\",\"Best Practice\",\"IIS\",\"SCOM\",\"Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/\",\"name\":\"SCOM WebConsole HTTP Redirect - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Detour-200x300.jpg\",\"datePublished\":\"2023-07-20T12:34:37+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Detour.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Detour.jpg\",\"width\":681,\"height\":1023,\"caption\":\"Detour sign, redirect ahead\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/07\\\/20\\\/scom-webconsole-http-redirect\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SCOM WebConsole HTTP Redirect\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SCOM WebConsole HTTP Redirect - Kevin Justin's Blog","description":"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/","og_locale":"en_US","og_type":"article","og_title":"SCOM WebConsole HTTP Redirect - Kevin Justin's Blog","og_description":"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-07-20T12:34:37+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour-200x300.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"SCOM WebConsole HTTP Redirect","datePublished":"2023-07-20T12:34:37+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/"},"wordCount":472,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour-200x300.jpg","keywords":["HTTP","HTTP ReDirect","IIS","SCOM","SCOM Web console","Server Manager","web console"],"articleSection":["Administration","Best Practice","IIS","SCOM","Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/","name":"SCOM WebConsole HTTP Redirect - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour-200x300.jpg","datePublished":"2023-07-20T12:34:37+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Use this post to set up SCOM WebConsole HTTP Redirect to mitigate VulnID 121040 via Server Manager and IIS Manager","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/07\/Detour.jpg","width":681,"height":1023,"caption":"Detour sign, redirect ahead"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/07\/20\/scom-webconsole-http-redirect\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SCOM WebConsole HTTP Redirect"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19470"}],"version-history":[{"count":3,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19470\/revisions"}],"predecessor-version":[{"id":19491,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19470\/revisions\/19491"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}