topic Secure cookie attribute is missing, need it enabled to pass security scans in ZoneDirector

Secure cookie attribute is missing, need it enabled to pass security scans

MatthewL — Wed, 12 Oct 2022 14:56:45 GMT

One of our security scanners says that our zone director server is missing a 'secure cookie' attribute, this needs to be turned on in order to pass our scans. Anyone have any idea how to enable this?

Re: Secure cookie attribute is missing, need it enabled to pass security scans

syamantakomer — Wed, 12 Oct 2022 15:04:09 GMT

Hi @MatthewL,

Could you please provide below details.

ZD model number.
AP models connected to this ZD (to check the possibility of ZD upgrade).
ZD firmware version
What tool you are using for scan?

We may need the scan report from your tool with more details. In that case, we will advise you to contact support and open a case with all the available details (https://support.ruckuswireless.com/cases/new).

Re: Secure cookie attribute is missing, need it enabled to pass security scans

syamantakomer — Wed, 12 Oct 2022 15:11:11 GMT

In addition to my comment, there was a known issue on older ZD firmware which was fixed on later firmware.

If you could confirm your current firmware version, we can suggest the correct version where issue is fixed. Support ticket is not required for now.

Re: Secure cookie attribute is missing, need it enabled to pass security scans

MatthewL — Wed, 12 Oct 2022 15:11:16 GMT

Hi Syamantak, here is the information.. Zone Director ZD1200 (10.1.2.0 build 277) with the following models (t610, r500, r700) - I do not know what they used for the security scan, it is part of their security tools.. I can ask but it may be proprietary

Re: Secure cookie attribute is missing, need it enabled to pass security scans

syamantakomer — Wed, 12 Oct 2022 15:28:40 GMT

Considering the AP models, I would advise you to upgrade the ZD software version to 10.2.1.0.212, as there is a fix added for this problem.

Firmware download link: https://support.ruckuswireless.com/software_terms_and_conditions/3254-zd1200-10-2-1-0-212-mr1-refresh8-software-release

Release notes: https://support.ruckuswireless.com/documents/4020-zonedirector-10-2-1-mr1-refresh8-release-notes/download

Note:

It is strongly recommended to read the release notes.
Make sure you download the configuration backup before upgrading the ZD, this can help in the event of upgrade failure.