Jai, Please see this below : | | <security-constraint> | <web-resource-collection> | <web-resource-name>Protected Area</web-resource-name> | <url-pattern>/app/secure</url-pattern> | <http-method>GET</http-method> | <http-method>POST</http-thod> | </web-resource-collection> | <user-data-constraint> | <transport-guarantee>CONFIDENTIAL</transport-guarantee> | </user-data-constraint> | </security-constraint> The web server will automatically make the URL use HTTPS if it finds this URL pattern View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4202408#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...