Cookie-Policy - IBM WebSphere XS40 Command Reference Manual

Datapower xml security gateway
Table of Contents

Advertisement

Guidelines
The acl command assigns an Access Control List to the Web Application Request
Profile. The Access Control List applies to all requests. Use the Global acl
command to create an Access Control List.
Use the no acl command to remove the Access Control List. Without an Access
Control List, no restrictions are enforced on clients that make requests.
Related Commands
acl (Global)

cookie-policy

Sets the Cookie processing policy.
Syntax
cookie-policy policy type [key] [in-watermark] [GNVC]
Parameters
policy
type
key
in-watermark
GNVC Specifies the name of an existing Name-Value Profile to apply to cookie
758
Command Reference
Specifies the requirement of presenting a cookie as part of the request.
allow (Default) Allows requests whether they present a cookie or not.
deny
Denies requests that present a cookie.
require
Requires requests to present a cookie.
If the request does not conform, setting to deny or require might cause an
error.
Specifies what to do with the cookie contents in the request.
none
(Default) Does not encrypt or sign cookie contents.
encrypt
Encrypts cookie contents using the specified key.
sign
Appends a digital signature to the cookie contents using the
specified key.
Specifies the secret passphrase to encrypt or sign cookie contents. If the
key is the same on multiple appliances, each appliance decrypts or verifies
the cookie contents with a key that is generated by another appliance
without maintaining state.
Generally signed or encrypted cookie contains the client IP address to
prevent the client from using this cookie from any other host. Some proxy
environments might make this behavior undesirable.
on
Adds the IP address to the cookie.
off
(Default) Does not add the IP address to the cookie. The cookie is
IP address independent.
contents. If not present, no profile is applied.

Advertisement

Table of Contents
loading

Table of Contents