You need to ensure that the executives can only access the secure Web site by using their installed certificates
You need to ensure that the protocol rollover will occur only if the users are accessing Server1 from the Internet