Search Scope and HTTPS Proxy

Question

We have a farm that sits behind a Forefront UAG server doing SSL termination. Traffic from the farm is un-encrypted over port 80 to the UAG server. The UAG server then sends the traffic encrypted over port 443 to the client. The SSL certificate sits on the UAG server and not on the SharePoint farm.

When users are logged in through the UAG server and they change the scope in the search to "This Site", the parameter "u=https%3a%2f%2fportal.foo.com" gets passed into the query string. The results page returns with no results. Manually changing the parameter from "https" to "http" causes the expected results to return. Search works fine with other scopes through UAG.

I thought about doing URL rewrites as an option, but would prefer not to. What is the best way to correct this?

Answer 1

Add the HTTPS version of the URL to the Alternate Access Maps in Central Administration. Even though it isn't actually reaching SharePoint with HTTPS, search needs to know that having HTTPS in the URL is valid for that content.