Description
This article describes how to enable 'cookiesession1' with secure flag true.
Related documents:
HTTP sessions & security | FortiWeb 7.6.0 | Fortinet Document Library
server-policy policy | FortiWeb 7.6.0 | Fortinet Document Library
Scope
FortiWeb.
Solution
To assign a secure flag to internal cookies 'cookiesession1' with session management enabled, this flag can only be assigned if the connection is over SSL. This feature is independent of the cookie security policy, if any, in use.
Example CLI configuration.
config server-policy policy
edit xxxxxx < ----- Replace with server-policy name.
set internal-cookie-secure enable
end
