Hiding ASP.NET information from Response Header


  
 Applies To 
  
 Product(s):eB Web
 Version(s):16.X.X
 Environment: N/A
 Area: Internet Information Services (IIS)
 Subarea: 
 Original Author:Gintautas Bajoriunas, Bentley Technical Support Group
  

 

 

 

 

 

 

 

 

This Wiki article will explain how to hide ASP.NET information in Response Header.

Background

This can be tested by using Fiddler

Steps to Accomplish

  1. To hide the version you need navigate to virtual directory, open web.config with text editor and add parameter enableversionheader="false" in httpruntime tag as in screenshot below

  2. To hide information that your site is supported by ASP.NET in need to log on to your web server you need to open Internet Information Services (IIS) Manager and  manually drop it from HTTP Response Headers (see screenshot below)

See Also

N/A