hello, is it possible to remove the server header (Server: Microsoft-IIS/7.5) in the http response headers? the option i see online is to modify the .ini file for the urlscan program that is loaded on the IIS 7.0 server. however, from reading other posts, that option is not available to us. is there a recommendation for an alternate option? thanks!
See http://blogs.msdn.com/b/varunm/archive/2013/04/23/remove-unwanted-http-response-headers.aspx You should use the URLRewrite method described in this article.
thanks, i did see this, however, when i open IIS7 for my website, i do not see the option for View Server Variables. "Step 4. Click on the “View Server Variables” in the Actions pane in the right hand side." how would i enable this option?
Take a look at this web page article here: http://weblogs.asp.net/owscott/viewing-all-server-variables-for-a-site It shows you how to get all the server variables for a site. I remember using it when I was playing around with URL Rewrite.
thank you for the suggestion. i can also view the server header using firebug>net>html>headers in firefox. according to the blog post, See http://blogs.msdn.com/b/varunm/archive/2013/04/23/remove-unwanted-http-response-headers.aspx i would need to add a server variable, “RESPONSE_SERVER”. unfortunately, when i bring up II7>URLRewrite, i do not have the panel option to "View Server Variables". the blog states that there are three options to remove the server header: 1. modify the server registry 2. use urlrewrite 3. use urlscan from what i can see so far, i do not have any of these options available. is there another suggestion to remove the server header? reading further, it looks like the server header is set in the applicationHost.config file, not the web.config file. http://forums.iis.net/t/1187303.aspx?How+can+I+define+a+server+variable+in+web+config do i have access to this file?
