World of EUC

During our pentest a security issue appeard for Netscaler. We are using Netscaler just for remote access to CVAD. How should i mitigate those risks:
• Missing "Secure" Cookie Attribute (HTTP)
• Missing "HttpOnly" Cookie Attribute (HTTP)
• TCP Timestamps Information (seems to be already deactivated in TCP Profile)


<https://docs.netscaler.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/load-balancing/force-secure-and-httponly-cookie-options.html|https://docs.netscaler.com/en-us/citrix-adc/current-release/getting-started-with-citrix-adc/load-balancing/force-secure-and-httponly-cookie-options.html>

If i configure my gateway that way, i get the storefront message: "cannot complete your request".