ASP Session Lost When Redirecting from HTTP to HTTPS (Windows Server 2008)

If your ASP session is being lost when redirecting from a non-secure http:// page to a secure https:// page on Windows Server 2008, it’s likely due to IIS session settings.

To resolve this issue in IIS:

1. Open Internet Information Services (IIS) Manager
2. Select your website from the list
3. Double-click ASP in the IIS section
4. Expand Services → Session Properties
5. Set Session State to True
6. Set New ID on Secure Connection to False
7. Click Apply and save changes

This ensures the session ID remains consistent across protocol changes, preventing session loss during redirects.

Still having issues? Contact our support team for help with ASP session management and IIS configuration.