This article brief about the steps involved in making an end to end HTTPS website which hosted in a VM IIS, in Azure and the traffic need to be routed via Application Gateway.
Internet Information Services
1 developer story and 8 posts tagged with “Internet Information Services”
Disable CORS for IIS 10 website by allowing all origins in two simple steps.
If OPTIONS preflight request getting 404 and URLScan enabled on your hosting machine, check out this article.
Restrict access to your website using IIS IP security
Use the provided rewrite rule to redirect HTTPS requests to HTTP.
Use IIS Rewrite rule to redirect all HTTP request to HTTPS.
Use IIS rewrite rule to redirect (301) all www requests to non-www.
When considering SEO, either you have to stick with www versioned url or non-www URLs. Having both accessible for a domain is a bad practice.