Hide Server Banner and Product Info from HTTP Header
A server banner may display information about the underlying hosting environment. Usually in Applications Manager, the information that can be exposed is the product name:
- Server: AppManager
For security purposes, it may be desirable to disable the Server response header.
Steps to remove header
- Take a backup and open <apm-home>/working/apache/tomcat/conf/backup/server.xml
- Search and remove below key-value(s).
- server="AppManager"
- Restart APM and verify the response headers.
Steps to verify
- If this has been reported as a violation in your network scan tool, please re scan and confirm.
- Manual steps:
- Using cURL : curl -v <Applications Manager URL>
eg., curl -v http://apm-me-server:9090
New to ADSelfService Plus?
Related Articles
How to enable HTTP Strict-Transport-Security (HSTS) response header
Overview From Applications Manager v16250, the super administrator has the option of enabling HSTS. The RFC 6797-specified HTTP Strict Transport Security (HSTS) protocol enables a website to identify itself as a secure host and notify browsers that ...Configure "/server-status" page for Oracle HTTP server
In order to monitor an Oracle HTTP server in Applications Manager, the '/server-status' page must be configured on the target Oracle HTTP server that needs to be monitored. This can be accomplished by following these steps: Step 1 - Enable the ...IIS Server monitor - Troubleshooting steps
Unable to add IIS Server monitor Follow the below given below to add an IIS server monitor in Applications Manager: First, check whether all the prerequisites are done. Check the IIS Server URL is accessible from Applications Manager server. If your ...Disable HTTP access in Applications Manager
Overview This article describes configuring a secure connection between Applications Manager server and the browser/client. Applications Manager can be accessed through any of the following URLs: For HTTP -> http://[hostname/ip-address]:[http-port] ...Configure "/server-status" page for IBM HTTP server
In order to monitor an IBM HTTP server in Applications Manager, the '/server-status' page must be configured on the target IBM HTTP server that needs to be monitored. This can be accomplished by following these steps: Step 1 - Enable the ...