Users logging on from home with IE9 receive “Display Mixed Content?” message

Question

Our intranet is on SharePoint 2010. Many employees are beginning to download IE9 and try logging on from home to our network. Users have to logon with a security token and I believe we use Juniper.

IE9 is throwing a popup message that says "Display Mixed Content?". I have directed our help desk to walk the users at home through changing the settings on their computer via the internet options.

Our help desk dept is now saying that although this is fine for a workaround we need something more permanent. How do I accomplish this. Security and infrastructure is way over my head.

Thanks, Ninel

Answer 1

Mixed content means that you are watching the page A. Over https and you have elements from source, or B. Over http and you have elements from https

By elements I mean javascripts, images, ...

What I would do is to see the page source from IEmand look for http or https. This helps you identify which where is the mixed content (masterbpage, page or content) and I would change all those links to server-relative (e.g. /your-subweb/your-image.gif)

Answer 2

The problem is you probably have a load balancer in front or juniper itself is acting as a load balancer so it is ssl from browser to load balancer/juniper and http from load balancer to web server, so the request is actually recieved as http and that code interprets it as such and calls google analytics over http. We had a similar problem with juniper.

The easy fix is just force the call over https/ssl in the code, since an http page calling https does not trigger the mixed content message.

Alternatively you could set up different zones and render the http/s protocols based on the fqdn URL used to access the site if you don't want to take the internal performance hit of calling ssl when you don't have to.