Security Parameters: Need to be apply to make secure solutions

Hi,

 

Cookie encryption is disabled in the screenshot......

 

Is it the application cookie that shows the session ID? If so, you have to encrypt it by enabling cookie encryption in the HTTP profile.

 

Look at the bottom section of your HTTP profile. There you can find HTTP STS (Strict transport security)

 

When you go to Security > Application Security > Attack Signatures. Go to advanced filtering and type directory in the string search field and click go.

 

At the bottom of the page you will find the assigned attack signatures for directory listing mitigation.

 

Cheers,

 

Kees