cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

3123
Views
0
Helpful
1
Replies
dedra_live
Beginner

How to set HttpOnly flag for cookies inserted by ACE

Hello,

I would like to know if it is possible to set the HttpOnly flag on cookies inserted by ACE module. I couldn't find any thing as such in the configuration guide.

Other load balancers do support this functionality.

Thanks.

1 REPLY 1
venkatkr
Cisco Employee

You need to do a action list. something like this

action-list type modify http MySFList1
  header insert both Set-Cookie header-value "Secure; HttpOnly"

policy-map type loadbalance first-match PL1
  class class-default
    sticky-serverfarm Sticky-MySF1
    action MySFList1

hope this helps

Venky