diff --git a/states/haproxy/templates/haproxy.cfg.j2 b/states/haproxy/templates/haproxy.cfg.j2
index c569dd7..92ac24b 100644
--- a/states/haproxy/templates/haproxy.cfg.j2
+++ b/states/haproxy/templates/haproxy.cfg.j2
@@ -292,6 +292,7 @@ frontend fe_https from {{ haproxy.config.namespace }}
   http-response set-header Server "{{ haproxy.config.servername }}"
   http-response set-header X-Random "%[var(txn.random)]"
   http-response set-header X-Robots-Tag "noindex,nofollow"
+  http-request set-header X-SSL-JA3 %[ssl_fc_protocol_hello_id],%[ssl_fc_cipherlist_bin(1),be2dec(-,2)],%[ssl_fc_extlist_bin(1),be2dec(-,2)],%[ssl_fc_eclist_bin(1),be2dec(-,2)],%[ssl_fc_ecformats_bin,be2dec(-,1)]
 {% if haproxy.config.quic|default(true) %}
 .if feature(QUIC)
   http-response set-header Alt-Svc "h3=\":443\"; ma=3600"