Novell ACCESS MANAGER 3.1 SP1 - GATEWAY GUIDE Manual page 14

Force HTTP-Only Cookie: Forces the Access Gateway to set the HttpOnly keyword, which
prevent scripts from accessing the cookie. This helps protect browsers from cross-site scripting
vulnerabilities that allow malicious sites to grab cookies from a vulnerable site. The goal of
such attacks might be to perform session fixation or to impersonate the valid user.
For more information and other options for securing Access Manager cookies, see
"Enabling Secure Cookies," on page
Enable Via Header: Enables the sending of the Via header to the Web server. The Via header
contains the DNS name of the Access Gateway and a device ID. It has the following format:
Via: 1.0 www.mylag.com (Access Gateway 3.1.1-72-D06FBFA8CF21AF45)
Deselect this option when your Web server does not need this information or does not know
what to do with it.
5 In the Reverse Proxy List, click New, specify a display name for the reverse proxy, then click
OK.
6 Enable a listening address. Fill in the following fields:
Cluster Member: (Available only if the Access Gateway is a member of a cluster.) Select the
server you want to configure from the list of servers. The Listening Address(es) and TCP Listen
Options modifications apply to the selected server. Modifications made to any other options on
the page apply to all servers in the cluster.
Listening Address(es): Displays a list of available IP addresses. If the server has only one IP
address, only one is displayed and it is automatically selected. If the server has multiple
addresses, you can select one or more IP addresses to enable. You must enable at least one
address by selecting its check box.
If the Access Gateway is in a cluster, you must select a listening address for each cluster
member.
14 Novell Access Manager 3.1 SP1 Access Gateway Guide
71.
Section 2.5,