Skip to main content
zizi
zizi
New Member
September 23, 2018
Question

httponly and secure on fortiweb 5.6

  • September 23, 2018
  • 1 reply
  • 5102 views

my question is about setting http only and secure on fortiweb 5.6. i set http only and secure on fortiweb 5.6 gui. but it doesnt work on all sessions when i check it as a client. 

 

i have 2 sessions in my website, one of them has httponly and secure true in path pgwchannel and its name is jsession and the other one has httponly true but secure  is false on root path and its name is cookiesession1.

what is the problem?

 

    1 reply

    Emmanuel_GIRIN
    Emmanuel_GIRIN
    New Member
    October 4, 2018

    Hi 

     

    Got exactly the same issue. In brief, how to set cookiesession1 both httpOnly and Secure?

    zizi
    ziziAuthor
    New Member
    October 6, 2018

    hi

    thanks for your answer, i didnt configure cookies seprately. i set up httponly and secure on my domain IP address. like this guide:

     http://help.fortinet.com/fweb/580/Content/FortiWeb/fortiweb-admin/cookie_security.htm

    i just active httponly and secure flags on Web Protection > Cookie Security > New Cookie Security.

    thank you.

     

    Terms & ConditionsAccessibility statement