Security Headers Server Configurations - Administrator Guide - 6.6 - Cortex XSOAR - Cortex

Security Headers Server Configurations - Administrator Guide - 6.6 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product

Cortex XSOAR

Version

6.6

Creation date

2022-09-29

Last date published

2024-07-30

End_of_Life

EoL

Category

Administrator Guide

Abstract

Server configurations for security headers.

Key	Description	Default
`http.same.site.cookie.attribute`	Sets the `SAMESITE` cookie value to `lax` or `strict` `lax` enables the cookie to be sent on some cross-site requests. `strict`, dooes not allow the cookie to be sent on a cross-site request. Setting to `strict` can cause issues when configuring SSO.	`lax`
`security.hsts.maxage`	Sets the `Max-Age` attribute the number of required seconds that the cookie should expire.	`31536000`
`security.hsts.preload`	Users are not protected until after their first successful secure connection to a given domain (false). Can be set by changing to `true`.	`false`

Key

Description

Default

http.same.site.cookie.attribute

Sets the SAMESITE cookie value to lax or strict

lax enables the cookie to be sent on some cross-site requests. strict, dooes not allow the cookie to be sent on a cross-site request.

Setting to strict can cause issues when configuring SSO.

lax

security.hsts.maxage

Sets the Max-Age attribute the number of required seconds that the cookie should expire.

31536000

security.hsts.preload

Users are not protected until after their first successful secure connection to a given domain (false). Can be set by changing to true.

false