Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

mo_ibrahim_3636's avatar
mo_ibrahim_3636
Icon for Nimbostratus rankNimbostratus
Jun 07, 2018

ASM detection

how do i prevent to detect the web server operating system and platform ?

 

1 Reply

  • Hi,

    you can use an irule to remove unwanted header:

    when HTTP_RESPONSE { 
    
        Remove all instances of the Server header 
       HTTP::header remove Server 
    
        Remove all headers starting with x- 
       foreach header_name [HTTP::header names] { 
    
          if {[string match -nocase x-* $header_name]}{ 
    
             HTTP::header remove $header_name 
          }
       }
    }
    

    In all case you will need to know what's header you want to remove, Once you know what it is they're looking for you could then obfuscate those header or removes it as above...

    Regards