httponly

[olejak]

Hi,

I'm running a SA2500 with 6.4R1 and I was wondering if it's possible to force the SA to set all cookies to httponly?

Cheers

Ole

[Mrkool]

not sure what you are asking in here. Are you trying to run your SSL vpn over port 80?

[olejak]

When you use cookies it is possible to set a attribute that say httponly.

This means that client side Java script can't access the cookie. 

I was just wondering if it is possible to force the SA to set this attribute on all cookies it uses.

Cheers

Ole

[muttbarker]

No, don't believe that this is possible.

[olejak]

Is there anybody that can tell me with 100% certainty?

/Ole

[ESpa]

Not possible:

http://kb.juniper.net/index?page=content&id=KB16127&cat=SA_5000&actp=LIST&showDraft=false