Troubleshooting Tip: How to request FortiWeb not to send the cookiesession1

[jcastellanos]

Description	This article describes that the admin could request FortiWeb not to send the cookiesession1 because of its internal security policies.
Scope	FortiWeb v7.4.x.
Solution	The user is receiving the cookiesession1. To disable it, identify the server-policy associated with the website and identify the web profile: config server-policy policy     edit "SERVERPOLICY"<---         set deployment-mode http-content-routing         set protocol HTTP         set ssl enable         set vserver VS_VIRTUALSERVER         set service HTTP         set proxy-protocol disable         set use-proxy-protocol-addr enable         set web-protection-profile WEBPROFILE <----- The cookiesession1 depends on the feature client-management that is enabled in the web profile.  config waf web-protection-profile inline-protection     edit "WEBPROFILE"         set client-management enable<-- to disable         set http-session-cookie disable         set http-session-timeout 1200