Several directories and pages in the Automate installation are not forced to use SSL by default. The new, /Automate, web directory is SSL enforced by default. However, several key directories are not — /WCC2 is a prime example.
Previously, we would use IIS URL Rewrites to redirect to SSL if the current URL requested was not browsed too with HTTPS. Unfortunately, it appears that CW is overwriting the web.config file where these changes are stored. They have stated it is not a supported configuration and we have to do this in the default.htm file moving forward (unless we want to redo it after each update).
How to change it
Find the folder directory under C:\inetpub\wwwroot for the directory you want to enforce SSL on – i.e., /wcc2. Double click and edit the default.htm file with the following:
This will now capture the oldURL (the current URL you browsed to) and append https:// to the URL string and then redirect it.