The Access Gateway and the embedded service provider (ESP) of the Access Gateway both use session cookies in their communication with the browser.
For more information about how to protect these cookies from being intercepted by hackers, see Enabling Secure Cookies
in the NetIQ Access Manager 4.2 Administration Guide .