Various basic cookies

Cookie Name

Description

Example Value (values are urldecoded)

AL_ENV_CONNECTION_ID

A unique ID for the front-end TCP connection which is used for frontend-NTLM together with Airlock IAM.

fPAA<...>2PCV

AL_ENV_HTTPS

Indicates whether the frontend connection was with HTTPS.

on

AL_ENV_MATCHING_IP_LISTS

All IP Address Lists that have matched the client IP address, regardless of whether this was a allowlisting or denylisting rule. The names of the matching lists are comma-separated and percent-encoded. Lists obtained through the Webroot threat intelligence service are prefixed with “TI:”.

MyIpList_16,TI:Spam Server

AL_ENV_REMOTE_ADDR

The IP address of the client.

168.192.1.123

AL_ENV_REQUEST_ID

A unique request ID to correlate multiple log messages in the same HTTP request.

D79v<...>AABb

AL_ENV_ROLES

The roles of the current session, with the remaining role idle timeout and the remaining role lifetime (in seconds). The value none (without remaining idle timeout/lifetime) is used if there are no roles.

role1:600:28732,role2:300:532

AL_ENV_REMOVED_ROLES

This cookie is intended for Airlock IAM to inform about removed roles and their reason for removal. The cookie is updated by Airlock Gateway when roles are reestablished, i.e. via the IAM Control-API.

Reasons for removal:

  • api = Control-API
  • idletime = idle timeout reached
  • lifetime = lifetime reached
  • anomaly = Airlock Anomaly Shield

role1:api,role2:idletime,role3:lifetime,role4:anomaly

AL_ENV_SESSION_ID

A unique session ID to correlate multiple log messages in the same session. The value none is used if there is no session ID.

a83e5<...>f4db3

AL_ENV_SESSION_TIMINGINFO

The remaining session idle timeout and the remaining session lifetime (in seconds).

600:28651

AL_ENV_SERVER_ADDR

The IP address of the virtual host that received the request.

10.1.0.56

AL_ENV_SERVER_NAME

The virtual hostname that received the request.

myappl.example.com

AL_ENV_SERVER_PORT

The port number that received the request.

443

AL_ENV_SERVER_PROTOCOL

The protocol name and version of the request.

HTTP/1.1, HTTP/2.0

AL_ENV_SERVER_REQUEST

The path of the received request.

/applpath/show.do

AL_ENV_SERVER_REQUEST_QUERY

The query string of the received request.

This cookie is only sent in one-shot-requests triggered by a one-shot authentication flow.

firstname=Markus&lastname=M%C3%BCller

AL_ENV_SESSION_TERMINATION_REASON

An explanatory string on the reason why a session has ended.

Reasons for termination

  • IdleTimeout = idle timeout reached
  • LifetimeExceeded = lifetime reached
  • ThreatHandling = threat handling set to terminate session on block
  • ClientFingerprinting:TOTAL_PENALTY_POINTS=<points> = Client Fingerprinting reached threshold to terminate session
  • ControlAPI = session terminated with control API

This cookie is only sent in logout propagation requests

  • IdleTimeout
  • LifetimeExceeded
  • ThreatHandling
  • ClientFingerprinting:TOTAL_PENALTY_POINTS=800
  • ControlAPI

AL_ENV_WAF_VERSION

Airlock Gateway version string in the format:
“<MAJOR>.<MINOR>.<MAINTENANCE>”
where MAJOR, MINOR and MAINTENANCE are sequences of digits.

Note: Hotfixes are not represented in the value. E.g. 8.3.1-HF0069 is represented as 8.3.1.

8.3.1