Various basic cookies

Cookie Name

Example Value (decoded)

Description

AL_ENV_CONNECTION_ID

fPAA<...>2PCV

A unique ID for the front-end TCP connection.

AL_ENV_HTTPS

on

Indicates whether the request was sent encrypted.

AL_ENV_MATCHING_IP_LISTS

MyIpList_16,TI:Spam Server

All IP Address Lists that have matched the client IP address, regardless of whether this was a whitelisting or blacklisting rule. The names of the matching lists are comma-separated and percent-encoded. Lists obtained through the Webroot threat intelligence service are prefixed with "TI:".

AL_ENV_REMOTE_ADDR

168.192.1.123

The IP address of the client.

AL_ENV_REQUEST_ID

D79v<...>AABb

A unique request ID.

AL_ENV_ROLES

role1:600:28732,role2:300:532

The roles of the current session, with the remaining role idle timeout and the remaining role lifetime (in seconds). The value none (without remaining idle timeout/lifetime) is used if there are no roles.

AL_ENV_REMOVED_ROLES

W/o percent-encoding:

AL_ENV_REMOVED_ROLES=role1:api,role2:idle,role3:ltim,role4:nmly
AL_ENV_REMOVED_ROLES=role1%3Aapi%2Crole2%3Aidle%2Crole3%3Altim%2Crole4%3Anmly

This cookie is intended for Airlock IAM i.e. to inform IAM about removed roles and their reason for removal. The cookie is updated by Airlock Gateway when roles are reestablished, i.e. via the IAM Control-API.

  • Encoded reasons for removal:
  • api = Control-API
  • idletime = idle timeout
  • lifetime = lifetime
  • anomaly = Airlock Anomaly Shield

AL_ENV_SESSION_ID

a83e5<...>f4db3

A unique session ID. The value none is used if there is no session ID.

AL_ENV_SESSION_TIMINGINFO

600:28651

The remaining session idle timeout and the remaining session lifetime (in seconds).

AL_ENV_SERVER_ADDR

10.1.0.56

The IP address of the virtual host that received the request.

AL_ENV_SERVER_NAME

myappl.example.com

The virtual hostname that received the request.

AL_ENV_SERVER_PORT

443

The port number that received the request.

AL_ENV_SERVER_PROTOCOL

HTTP/1.1

The protocol name and version of the request, e.g. HTTP/0.9, HTTP/1.0, HTTP/1.1, HTTP/2.0.

AL_ENV_SERVER_REQUEST

/applpath/show.do

The path of the request.

AL_ENV_SERVER_REQUEST_QUERY

firstname=Markus&lastname=M%C3%BCller

The query string of the request.

This cookie is only sent in one-shot-requests triggered by a one-shot authentication flow.

AL_ENV_SESSION_TERMINATION_REASON

IdleTimeout

or

ClientFingerprinting: TOTAL_PENALTY_POINTS=800

An explanatory string on the reason why a session has ended.

Possible values are "IdleTimeout","LifetimeExceeded ", "ThreadHandling", "ControlAPI", "ClientFingerprinting".

Additional arguments may be added to the value in the form of <key>=<value> pairs delimited by a colon (:). In case of "ClientFingerprinting" the total reached penalty points, leading to termination of the session, is appended as "TOTAL_PENALTY_POINTS=<INT>".

This cookie is only sent in logout propagation requests

AL_ENV_WAF_VERSION

7.2.0

Airlock Gateway version string in the format:
"<MAJOR>.<MINOR>.<MAINTENANCE>"
where MAJOR, MINOR and MAINTENANCE are sequences of digits.