Secure & Nonsecure items warning

[noodles1]

I have an ASP application that runs on 2 web servers load balanced via WLBS. The site uses SSL.

I have 1 group of users that access the site from their office that, when accessing via the URL

http://www.???,

they are continually presented with the Security Information "This page contains both secure and nonsecure items" warning.

When any of this group of users accesses either of the web servers directly, using

http://wwww2.???

etc., the warning is not presented.

None of my other users encounters the warning.

Any ideas?

 

[Sheco]

Check for a full URL in an image tag (<img src=''>) or maybe an external script file (.js) or stylesheet (.css)

You are looking for something with http:// specified.

Most of the stuff will have a relative path ('../images/foo.gif') so you are looking for the odd item that specifies http://

 

[Sheco]

Also you might try looking for these by having one of these users do "View Source" from their browsers and sending you the resulting HTML. This will allow you to examine the page from your browser's point of view.

 

[monksnake]

This may not apply in your situation, but I'll mention it. Almost every time I've encountered the "This site contains secure and nonsecure items" message, the culprit has been an iframe whose source was a page that did not have SSL.

Sheco pretty much covered everything.

<.

 

[noodles1]

Thanks for the suggestions.

I have checked through the source to try and ensure that no content is coming from outside the secure server.

What surprises me is that it only happens to 1 group of users from a common office and only if the use the Load Balanced URL.

I'll request a copy of the content from View Source. Good suggestion.