Hi With your help, I eventually have done all the steps for SSL setup. Now "https" works. The issue is "http" witch is still working and give access to browser. What did I miss?
HTTP is normally available. You can force a client to connect using HTTPS with IIS7 Manager. Please see this link for details: http://blogs.msdn.com/b/rakkimk/archive/2007/05/29/iis7-how-to-force-a-website-to-use-ssl.aspx
This Knowledge Base article will show you how to connect to your site using IIS7 Manager: http://support.Winhost.com/KB/a628/using-the-microsoft-iis-70-manager.aspx