The cookies used by Enterprise Vault web applications such as Browser Search and Archive Explorer are accessed in JavaScript which, in some circumstances, may be advised against from a vulnerability point of view. However, in the web applications, none of the cookies used contain sensitive information that can be perceived as a security threat. 

The cookies are used to store column widths of tables in Archive Explorer so that they are preserved on the client, to store the name of the basket when restoring from the Browser Search and the LTPA token issued by Domino during authentication of the Domino Search application.  If these cookies are set to HTTPONLY then all of this functionality will be lost.

If these features are not relevant, the cookies can be disabled in Internet Explorer as follows:

1. Select Tools | Internet Options... from the main menu.
2. Change to the Security tab
3. Click Custom Level...
4. Scroll down to the Cookies section.
5. Set Allow cookie that are stored on your computer to Disable Set Allow per-session cookies to Disable
6. Click OK

Applies To

All supported Enterprise Vault versions.