Ah, thanks, I see the Use SSL option/checkbox at Cfg. > Settings > Gen. & Misc. > Security Settings tab. And it seems to work well with the "built-in" nopC pages. But on my custom pages it's not forcing SSL? In another host, we had a rewrite rule in web.config to force SSL that worked great, but after migrating to Azure, the same rewrite rule causes the famous loop issue.