FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
shafiq23
Staff
Staff
Article Id 301500
Description This article describes the requirements of enabling cookiesession1 secure flag attribute.
Scope FortiWeb, FortiWeb-VM.
Solution

Requirement:

  1. HTTPS service is enabled in the server policy:

 

1.png

 

  1. Client management is enabled in the Web Protection Profile.

 

2.png

 

  1. Web Protection Profile is applied in server policy:

 

4.png

 

  1. CLI command 'set internal-cookie-secure enable' is applied in server policy:

 

3.png


Note:

Despite having a Cookie Security profile configured in the Web Protection Profile, the Cookie Secure attribute will not be set to true.

 

Follow the below article to enable and verify the cookiesession1 secure flag:

Technical-Tip: How to enable cookiessession1 with secure flag true 

Contributors