The invention discloses a hyper text transport protocol (HTTP) Cookie protection method based on a preposed gateway, belonging to the field of Web security. The method comprises the following steps: 1-1), when the preposed gateway receives an HTTP response which is sent to a client-side from a server, signing a cookie name value pair in the response; and 1-2), when the preposed gateway receives an HTTP request which is sent to the server from the client-side, verifying the cookie name value pair in the request; and if the cookie name value pair is qualified by the verification, permitting the HTTP request. The protection method provided by the invention can be applied to Web servers.