Hide Server Banner and Product Info from HTTP Header
A server banner may display information about the underlying hosting environment. Usually in Applications Manager, the information that can be exposed is the product name:
- Server: AppManager
For security purposes, it may be desirable to disable the Server response header.
Steps to remove header
- Take a backup and open <apm-home>/working/apache/tomcat/conf/backup/server.xml
- Search and remove below key-value(s).
- server="AppManager"
- Restart APM and verify the response headers.
Steps to verify
- If this has been reported as a violation in your network scan tool, please re scan and confirm.
- Manual steps:
- Using cURL : curl -v <Applications Manager URL>
eg., curl -v http://apm-me-server:9090
New to ADSelfService Plus?
Related Articles
How to enable HTTP Strict-Transport-Security (HSTS) response header
Overview From Applications Manager v16250, the super administrator has the option of enabling HSTS. The RFC 6797-specified HTTP Strict Transport Security (HSTS) protocol enables a website to identify itself as a secure host and notify browsers that ...Configure "/server-status" page for Oracle HTTP server
In order to monitor an Oracle HTTP server in Applications Manager, the '/server-status' page must be configured on the target Oracle HTTP server that needs to be monitored. This can be accomplished by following these steps: Step 1 - Enable the ...Disable HTTP access in Applications Manager
Overview This article describes configuring a secure connection between Applications Manager server and the browser/client. Applications Manager can be accessed through any of the following URLs: For HTTP -> http://[hostname/ip-address]:[http-port] ...Configure "/server-status" page for IBM HTTP server
In order to monitor an IBM HTTP server in Applications Manager, the '/server-status' page must be configured on the target IBM HTTP server that needs to be monitored. This can be accomplished by following these steps: Step 1 - Enable the ...IIS Server monitor - Troubleshooting steps
Unable to add IIS Server monitor Follow the below given below to add an IIS server monitor in Applications Manager: First, check whether all the prerequisites are done. Check the IIS Server URL is accessible from Applications Manager server. If your ...