Creating A Proxy Service - Novell ACCESS MANAGER 3.1 SP2 - ACCESS GATEWAY GUIDE 2010 Manual

Force HTTP-Only Cookie: Forces the Access Gateway to set the HttpOnly keyword, which
prevent scripts from accessing the cookie. This helps protect browsers from cross-site scripting
vulnerabilities that allow malicious sites to grab cookies from a vulnerable site. The goal of
such attacks might be to perform session fixation or to impersonate the valid user.
IMPORTANT: The HttpOnly keyword can prevent applets from loading and can interfere
with JavaScript. Do not enable this option if you are using the traditional SSL VPN server
(which is configured as a protected resource of the Access Gateway) or if you have the Access
Gateway protecting applications that download applets or use JavaScript.
7 To create a proxy service, continue with

1.1.1 Creating a Proxy Service

1 In the Administration Console, click Devices > Access Gateways > Edit > Reverse Proxy /
Authentication.
2 In the Reverse Proxy List, click New, specify a display name for the reverse proxy, then click
OK.
3 Enable a listening address. Fill in the following fields:
Cluster Member: (Available only if the Access Gateway is a member of a cluster.) Select the
server you want to configure from the list of servers. The Listening Address(es) and TCP Listen
Options modifications apply to the selected server. Modifications made to any other options on
the page apply to all servers in the cluster.
Listening Address(es): Displays a list of available IP addresses. If the server has only one IP
address, only one is displayed and it is automatically selected. If the server has multiple
addresses, you can select one or more IP addresses to enable. You must enable at least one
address by selecting its check box.
Section 1.1.1, "Creating a Proxy Service," on page
Configuring the Access Gateway to Protect Web Resources
17.
17