For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

LaurentG_53647's avatar
LaurentG_53647
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

Unable to Remove HTTP server signature - Bigip info still displayed -

Hi all,   I create an irule to remove some headers information (see below) unfortunately with this irule, when I am running a sslabs check, the HTTP server signature : BigIP is still displayed. ...
application delivery
ASM Advanced WAF
devops
iRules
LTM
security
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Apr 24, 2015

Try editing your HTTP profile and blank out the "Server Agent Name" field.

 

  • LaurentG_53647's avatar
    LaurentG_53647
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2015
    Hi Brad I checked the parameters but I did not find this field in my http profile. just to be sure, it is located here Local Traffic ›› Profiles : Services : HTTP , right?
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Icon for Nacreous rankNacreous
    Apr 24, 2015
    Yes, what BigIP version are you running? I think it may have been introduced as a configurable option in 11.5.
  • Brad_Parker_139's avatar
    Brad_Parker_139
    Icon for Nacreous rankNacreous
    Apr 24, 2015
    Also, do you have any other iRules attached to your HTTPS VS that could be responding to requests on the root of the site?
  • LaurentG_53647's avatar
    LaurentG_53647
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2015
    we are running with: BIG-IP 11.4.1 Build 681.0 Hotfix HF8 Any other applicable solution for version 11.4 ?