2.8.2 web.xml

<filter>

     <filter-name>
      httpHeaderSecurity
     </filter-name>

   <filter-class>
            org.apache.catalina.filters.HttpHeaderSecurityFilter
   </filter-class>

     <async-supported>
      true
     </async-supported>

   <init-param>
      <param-name>hstsMaxAgeSeconds</param-name>
<param-value>31536000</param-value>
     </init-param>
 
   <init-param>
      <param-name>antiClickJackingOption</param-name>
      <param-value>SAMEORIGIN</param-value>
   </init-param>

</filter>
<filter-mapping>
   <filter-name>httpHeaderSecurity</filter-name>
   <url-pattern>/*</url-pattern>
   <dispatcher>REQUEST</dispatcher>
</filter-mapping>

You can modify this file using Advanced File Configurator. See Advanced File Configurator in the NetIQ Access Manager Appliance 5.0 Administration Guide.