Forum Discussion

jgdlarsen_16724's avatar
jgdlarsen_16724
Icon for Nimbostratus rankNimbostratus
Oct 27, 2014

The internal IP address of an IIS 7.0 server is revealed.

Hello all,   A WebInspect Scan finding sees that we are revealing an internal I.P. address.   The server discloses it's internal IP: 10.x.x.x IIS hot fix will not work for this issue, does ...
application delivery
devops
iRules
LTM
security
Ryannnnnnnnn's avatar
Ryannnnnnnnn
Icon for Altocumulus rankAltocumulus
Oct 27, 2014

Can you give any further details on your configuration?

 

Are you using cookie persistence in the above situation?

 

jgdlarsen_16724's avatar
jgdlarsen_16724
Icon for Nimbostratus rankNimbostratus
Oct 27, 2014
No, Default Persistence Profile is set to none. Have two Vips one for 80 and one for 443. 80 of course is redirecting to 443 Vip. Custum-http, auto map, one connect. After further research no Microsoft hot fix was identified. The appserver is revealing the internal IP would like to know if an iRule can mask it.