For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2015

So, ASM will remove the Server header by default if it's enabled on the VIP.

 

If you haven't got ASM then irules will be your friend here. See the following links:

 

SOL11324: Setting the secure attribute for HTTP cookies

 

HTTP::header wiki

 

This will have an example on how you can loop through headers and remove any that you want.

 

Hope this helps,

 

N