Difference between revisions of "IIS"
Jump to navigation
Jump to search
| Line 3: | Line 3: | ||
==HTTP Header== | ==HTTP Header== | ||
| − | + | #To modify header is not only related to App | |
| − | + | #Server name is not exposer “Microsoft-HTTPAPI/2.0”. | |
| − | + | #Pre-auth was done in the test. | |
| − | + | #The explanation is: If the response's Server header returns Microsoft-HttpApi/2.0, it means that the HTTP.sys is being called, not IIS. | |
| − | + | #Navigate HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\ If DisableServerHeader doesn't exist, create it (DWORD 32bit) and give it a value of 2. If it does exist, and the value isn't 2, set it to 2 | |
| − | + | #Who's that the answer is the ADFS. | |
| − | + | #Registry entry has to be done on the ADFS. | |
| − | + | #It will affect everything | |
| − | + | #It is not IIS hence it does not have to be done on the WAP (reverse proxy) | |
| − | + | #ADFS has to be updated on the registry. | |
| − | + | #to whom response, it can be done. | |
| + | |||
| + | Resources: https://blogs.msdn.microsoft.com/dsnotes/2017/12/18/wswcf-remove-server-header/ | ||
Latest revision as of 00:19, 11 February 2019
Restart IIS
Click Start, click Run type IISReset, and then click OK.
HTTP Header
- To modify header is not only related to App
- Server name is not exposer “Microsoft-HTTPAPI/2.0”.
- Pre-auth was done in the test.
- The explanation is: If the response's Server header returns Microsoft-HttpApi/2.0, it means that the HTTP.sys is being called, not IIS.
- Navigate HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\ If DisableServerHeader doesn't exist, create it (DWORD 32bit) and give it a value of 2. If it does exist, and the value isn't 2, set it to 2
- Who's that the answer is the ADFS.
- Registry entry has to be done on the ADFS.
- It will affect everything
- It is not IIS hence it does not have to be done on the WAP (reverse proxy)
- ADFS has to be updated on the registry.
- to whom response, it can be done.
Resources: https://blogs.msdn.microsoft.com/dsnotes/2017/12/18/wswcf-remove-server-header/