For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Jan 30, 2015

I think you could use HTTP::cookie, you can set the httponly and secure flags on each of the cookies manually if you want. And you'd want to do that on the HTTP_RESPONSE event.

when HTTP_RESPONSE {
    foreach cookie [HTTP::cookie names] {
        HTTP::cookie secure $cookie enable
        HTTP::cookie httponly $cookie enable
    }
}