For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • Hi,

    you can use an irule to remove unwanted header:

    when HTTP_RESPONSE { 
    
        Remove all instances of the Server header 
       HTTP::header remove Server 
    
        Remove all headers starting with x- 
       foreach header_name [HTTP::header names] { 
    
          if {[string match -nocase x-* $header_name]}{ 
    
             HTTP::header remove $header_name 
          }
       }
    }
    

    In all case you will need to know what's header you want to remove, Once you know what it is they're looking for you could then obfuscate those header or removes it as above...

    Regards