Synchronizing Security Policies Across Products

You have four Barracuda Web Application Firewalls serving three locations: New York, San Francisco and London. Your primary Security Policies database dictates that all devices should have the HttpOnly attribute set to Yes for cookies, preventing the cookie from being accessed by client-side scripts.

To configure:

1. Click on the group of Barracuda Web Application Firewalls from the Appliance Control Dashboard, and check the SECURITY POLICIES > Cookie Security page. An exception triangle for this setting may display, as shown in the image below, if the devices are not in sync for this setting.
2. Hover the mouse over the setting to view the values for Http Only on each device in the pop-up table:
   

To resolve an exception:

1. To resolve the issue, click on the NYC and London Web Application Firewalls, successively, in the Appliance Control Tree, and change the settings to match those of the two San Francisco systems.
2. Once you save those settings, the exception triangle no longer displays next to the setting when viewed in the Group context.