| STIG ID | Version | Title | Product |
|---|---|---|---|
| APWS-AT-000480 | V1R1 | Cookies exchanged between any Automation Controller NGINX web server and any client, such as session cookies, must have security settings that disallow cookie access outside the originating Automation Controller NGINX web server and hosted application. | |
| IIST-SV-000134 | V3R1 | The IIS 10.0 web server must use cookies to track session state. |