For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Habib_Ulla_Khan's avatar
Habib_Ulla_Khan
Icon for Nimbostratus rankNimbostratus
Jan 27, 2017

cookie secure and http only -- All cookies that gets downloaded

  i want to secure and http only all cookies when my application is accessed. Tried couple of irule link text and link text no luck. When i use irule similar to second thread, jsessionid cook...
application delivery
iRules
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 27, 2017

Hi Habib,

you may try the iRule below to set the 

HttpOnly
and 
Secure
flags to every issued cookie...

when HTTP_RESPONSE {
    foreach cookie [HTTP::cookie names] {
        HTTP::cookie secure $cookie enable 
        HTTP::cookie httponly $cookie enable 
    }
}

Cheers, Kai