We are using Sitecore 8.2 and We are doing the pen test and reports showing
ASP.NET_SessionId is not enabled as a secure.
I had tried the below things in
web.config file but this is not working properly.
<httpCookies requireSSL="true" />
<forms name=".ASPXAUTH" cookieless="UseCookies" requireSSL="true" />
Is there any other possible way to change the SSL true for the cookies?