Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

TSCookie not set with http-only or secure flags

Sri1
Nimbostratus
Nimbostratus

Hi everyone,

I have the ASM module enabled with the http-only and secure flags variables enabled globally , this works as I see these flags are set on most of the TS cookies except this one TS0163e0ba, this does not have bot or dos profile.

Virtual server is configured for example abc.test.com

TS cookie is set for all abc.test.com traffic.

But not set for test.com (which is not associated with Virtual srver)

Please clarify as I don't find any documents to understand if this should set the cookie for all the domains.

 

Thanks.

 

 

 

 

1 REPLY 1

zamroni777
Altostratus
Altostratus

cookie domain follows HTTP spec.
you can read this explanation:
https://stackoverflow.com/a/1063760/13856607