How to set HttpOnly flag for cookies inserted by ACE

[dedra_live]

Hello,

I would like to know if it is possible to set the HttpOnly flag on cookies inserted by ACE module. I couldn't find any thing as such in the configuration guide.

Other load balancers do support this functionality.

Thanks.

[venkatkr]

You need to do a action list. something like this

action-list type modify http MySFList1
  header insert both Set-Cookie header-value "Secure; HttpOnly"

policy-map type loadbalance first-match PL1
  class class-default
    sticky-serverfarm Sticky-MySF1
    action MySFList1

hope this helps

Venky