Hi,
We have a web server front-ending an app server.
When a browser accesses a URL served by the web server through HTTPS we do not want the web server to require a client certificate to be presented.
However when a web service client accesses the Web Server to invoke a web service operation we want to require that the client certificate be presented to enable strong authentication.
Is it possible to do this separation on a single web server ?
Thanks,
K