Remove Unwanted HTTP Response Headers

Verbose logging tracks all changes and settings applied using Group Policy and its extension to the local computer and to users who log on to the computer. The log file is located at SystemDrive\Debug. This folder is a hidden folder.

To enhance security measures and remove the unwanted HTTP response headers, you can use the following available provisions:

• Web Configuration Changes

• Native HTTP Module

Web Configuration Changes

In the Enterprise Console Web configuration file, add the following code inside the System.WebServer tag

<system.webServer>

<validation validateIntegratedModeConfiguration="false" />

<modules runAllManagedModulesForAllRequests="true">

<add name="HideServerHeaderModule" type="Wonderware.Workflow.SecurityConfig.HideServerHeaderModule, Wonderware.Workflow.SecurityConfig, Version=4.0.0.0, Culture=neutral, PublicKeyToken=1add7d6ea5a31926" />

</modules>

Native HTTP Module

After installing AVEVA Work Tasks, ensure to have the following StripHeaders entries in the application configuration in the following path:

C:\Windows\System32\inetsrv\config\applicationHost

StripHeaders is a third party module that you can download from the Internet.