We are having SharePoint 2016 (SP16) & Office Online Server (OOS) behind a reverse proxy (ARR) on-premises and offloaded SSL (ssl certificate installed on the reverse proxy only).
However, when users open files from SP16, there are 2 problems:
- Warning: "Only secure content is displayed" > have to click "Show all content".
- Subsequent requests sending from clients to oos.myexternal.com (proxy) are in both types HTTP & HTTPS instead of only HTTPS.
Please help to advise if anything wrong from the following details or additional configuration required on the proxy. Thanks.
ServerName : OOS.myinternal.COM
WopiZone : external-http
*Notes: Understanding the offloading poses an insecure issue but mine's just a shared environment without any sensitive content, also the connections among the proxy & other servers are private. Just want to know configuration to make it work, pls don't discuss the security topic here. Thanks.