If the transport-guarantee is set to CONFIDENTIAL using the @WebContext annotation then the following happens: -

1 - The services page https://localhost:8443/jbossws/services lists access to the WSDL using a https address.
2 - The address in the WSDL is a https address. (Regardless of if WSDL is accessed over http or https)
3 - The endpoint called over http results in a 302 status being returned.

If the transport-guarantee is defined in the jboss.xml then only the following happens: -

3 - The endpoint called over http results in a 302 status being returned.

The first two report only http addresses.