Activity Processors: Cookie Protection Processor

This processor is responsible for protecting a set of application cookies from modification or assignment by the user.

Table 22: Cookie Protection Processor Configuration Parameters

Parameter

Type

Default Value

Description

Basic

Processor Enabled

Boolean

True

Whether traffic should be passed through this processor.

Protected Cookies

Collection

Collection

The name of the protected cookie.

Advanced

Protected Cookie Signature Suffix

String

Random

The suffix to add to the protected cookie names when generating a signature cookie. For example, if the protected cookie is PHPSESSID and the suffix is _MX, then the signature for PHPSESSID would be in a cookie named PHPSESSID_MX.

Incident: Application Cookie Manipulation

Boolean

True

The user either attempted to modify one of the protected cookies, or attempted to assign a new value.