The detection of endpoints with a transport-guarantee of CONFIDENTIAL tries to exactly map the url-pattern in the WSDL so if the servlet is defined with: -

<url-pattern>/PhoneBook</url-pattern>

And the security constraint is defined with: -

<url-pattern>/*</url-pattern>

The patterns do not patch and JBossWS assumes it is not CONFIDENTIAL when generating the address, this causes the WSDL to be generated with a http address.

The transport-guarantee is still enforced by JBossWeb as it is defined in the web.xml but the WSDL has the wrong address which causes problems for the clients trying to connect.