---
title: HTTP Only Device Cookie
slug: isac/admin-guide/android/http-only-device-cookie
docTags: 
createdAt: 2026-07-23T05:01:25.082Z
---

Ivanti Secure Access Client (ISAC) on Android, when configured with Ivanti Connect Secure (ICS), can utilize HTTP-only cookies to enhance security and user experience. These cookies, specifically the "HTTP Only Device Cookie," are designed to be accessed only by the server and not by client-side scripts, preventing potential cross-site scripting (XSS) attacks.