Secure cookie attribute is missing, need it enabled to pass security scans

[MatthewL]

One of our security scanners says that our zone director server is missing a 'secure cookie' attribute, this needs to be turned on in order to pass our scans. Anyone have any idea how to enable this?

[syamantakomer]

Hi @MatthewL,

Could you please provide below details.

1. ZD model number.
2. AP models connected to this ZD (to check the possibility of ZD upgrade).
3. ZD firmware version
4. What tool you are using for scan?

We may need the scan report from your tool with more details. In that case, we will advise you to contact support and open a case with all the available details (https://support.ruckuswireless.com/cases/new).

[syamantakomer]

In addition to my comment, there was a known issue on older ZD firmware which was fixed on later firmware.

If you could confirm your current firmware version, we can suggest the correct version where issue is fixed. Support ticket is not required for now.

[MatthewL]

Hi Syamantak, here is the information.. Zone Director ZD1200 (10.1.2.0 build 277) with the following models (t610, r500, r700) - I do not know what they used for the security scan, it is part of their security tools.. I can ask but it may be proprietary

[syamantakomer]

Considering the AP models, I would advise you to upgrade the ZD software version to 10.2.1.0.212, as there is a fix added for this problem.

Firmware download link: https://support.ruckuswireless.com/software_terms_and_conditions/3254-zd1200-10-2-1-0-212-mr1-refres... 

Release notes: https://support.ruckuswireless.com/documents/4020-zonedirector-10-2-1-mr1-refresh8-release-notes/dow... 

Note:

• It is strongly recommended to read the release notes.
• Make sure you download the configuration backup before upgrading the ZD, this can help in the event of upgrade failure.