asked on 12/10/2013

IIS and server banner info

How do you disable the server type banner on an http request? Right now ours is publsihing server: MicrosoftIIS/7.5. If it can be disabled, can it be disabled without messing up exchange?

Microsoft IIS Web Server Exchange Windows Server 2012

Last Comment

Simon Butler (Sembee)

12/10/2013

Simon Butler (Sembee)

12/10/2013

Why do you want to do that? You don't get security by obscurity.
If you are running Exchange on the server then it will take an attacker about 5 seconds to realise what server you are running.

Simon.

bnussbaum

12/10/2013

ASKER

We hire a 3rd party audit comany to audit our systems, and they have flagged this as a medium vulnerability. They said to use urlscan tool to obscure the header info, but it appears that with IIS 8, that tool can't be used. I was hoping there was an easy way to just disable it.

ASKER CERTIFIED SOLUTION

Simon Butler (Sembee)

12/10/2013

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

Exchange

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

213K

Questions

Followers

Top Experts

Get a personalized solution from industry experts

Ask the experts

"Invaluable tool for our organization"
Josh Regalski
"This is the best money I have ever spent."
@rwheeler23
"Your help has saved me hundreds of hours of internet surfing."
@fblack61
"Just a dang good service!"
@golferski
"Worth every penny."
Steve Hougom
"It’s been a life saver."
Maria Halt
"Best support site I’ve seen!"
Bob Schneider
"I would be lost without them."
@fblack61
"Saved my job multiple times."
Walt Forbes
"I love this site."
Maria Duwe
"Friendly respectful help."
Andrew Kowtalo
"Such top-notch experts."
@magento
"The best money I have ever spent."
@rwheeler23
"Beyond any comprehensible value"
George Morris
"Invaluable tool for our organization"
Josh Regalski
"This is the best money I have ever spent."
@rwheeler23

Read over 600 more reviews

TRUSTED BY