[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

IIS server version hiding

Posted on 2013-11-26
2
Medium Priority
?
422 Views
Last Modified: 2013-12-01
Hi,
I have a web application published by using IIS on a web server.
This application can be accessed with a user and password.
Can someone who doesn't have password see IIS version which this applicaiton running on?
And how do I hide this version information?
Thank you
0
Comment
Question by:certuran
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 58

Accepted Solution

by:
Gary earned 750 total points
ID: 39679378
Yes they can but you can override it.
Download http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=5728
Open up %WinDir%\System32\inetsrv\urlscan\UrlScan.ini
Search for RemoveServerHeader and set the value to 1 or look for AlternateServerName and set it to whatever you want it to say instead of IIS...

And for other headers
http://www.troyhunt.com/2012/02/shhh-dont-let-your-response-headers.html
0
 

Author Closing Comment

by:certuran
ID: 39687871
I could hide IIS version with this suggestion. Thank you very much.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question