LIVEcommunity - Who Me Too'd this topic

This vulnerability is detected on global protect public ip.

HSTS header does not contain includeSubDomains

The HTTP Strict Transport Security (HSTS) header does not contain the includeSubDomains directive. This directive instructs the browser to also enforce the HSTS policy over subdomains of this domain.
Expected Headers > strict-transport-security: max-age=[anything]; includeSubDomains; ...
Actual max-age=31536000;

Panos version installled 9.1.7.

anyone aware about this vulnerability and resolution ?

Who Me Too'd this topic

L0 Member

Me Too date:

Unlock your full community experience!

Who Me Too'd this topic

Vulnerability - HSTS header does not contain includeSubDomains