3.17.2 web.xml

<filter>
     <filter-name>
      httpHeaderSecurity
     </filter-name>
   <filter-class>
            org.apache.catalina.filters.HttpHeaderSecurityFilter
   </filter-class>
     <async-supported>
      true
     </async-supported>
   <init-param>
            <param-name>hstsMaxAgeSeconds</param-name>
      <param-value>31536000</param-value>
     </init-param>
   <init-param>
        <param-name>antiClickJackingOption</param-name>
      <param-value>SAMEORIGIN</param-value>
     </init-param>

</filter>
<filter-mapping>
   <filter-name>httpHeaderSecurity</filter-name>
     <url-pattern>/*</url-pattern>
   <dispatcher>REQUEST</dispatcher>
</filter-mapping>

NOTE:You can add these filters at any location in the web.xml if it is not within any existing tag.

You can modify this file using Advanced File Configurator. See Advanced File Configurator in the NetIQ Access Manager Appliance 5.0 Administration Guide.