DEV Community

Steve Mak
Steve Mak

Posted on • Edited on

How to remove IIS server information from the response header?

#howto #iis #remove #header

How to remove IIS server information from the response header?

(Tested on IIS 10.0, ASP.NET MVC 5)

Add/Edit three lines of code in web.config as below

Line 1

<httpRuntime targetFramework="4.7.2" enableVersionHeader="false" />
Enter fullscreen mode Exit fullscreen mode

Line 2

<remove name="X-Powered-By" />
Enter fullscreen mode Exit fullscreen mode

Line 3

<requestFiltering removeServerHeader="true" />
Enter fullscreen mode Exit fullscreen mode

Overview 

...
<system.web>
    <compilation debug="true" targetFramework="4.7.2" />
    <httpRuntime targetFramework="4.7.2" enableVersionHeader="false" />
</system.web>
<system.webServer>
    <httpProtocol>
        <customHeaders>
            <remove name="X-Powered-By" />
        </customHeaders>
    </httpProtocol>
    <security>
        <requestFiltering removeServerHeader="true" />
    </security>
</system.webServer>
...
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

jasmeet7015 profile image

Should You Customize Your Resume for Every Job? Here's What I Learned After Applying to 100 Roles

Jasmeet Singh -

adityabhuyan profile image

Effective Methods for Troubleshooting Deadlocks in SQL Server

Aditya Pratap Bhuyan -

adityabhuyan profile image

How Edge Computing is Revolutionizing Data Processing and IoT Applications

Aditya Pratap Bhuyan -

digvijay-bhakuni profile image

Cracking the Proxy Puzzle: Forward vs Reverse 🧩

Digvijay Bhakuni -