Override the server header

Question

&ldquo;Our penetration testing team has discovered that our servers are responding to client requests with the server software name and its version. For instance, the responses include identifiers like &ldquo;openssh_for_windows_9.2&rdquo; or &ldquo;nginx 1.22.1&rdquo;. Does anyone know how to hide or override these response headers on a Sophos XG firewall?&rdquo;

Spencer Smith · Accepted Answer

This is not something that the firewall would be responsible for. 
 What the penetration testing team is referring to are known as banners, for example if you create a TCP connection with SSH it will display a banner with the version and other information. 
 You can actually disable these banners. 
 
 OpenSSH for Windows: learn.microsoft.com/.../openssh_server_configuration 
 Nginx: www.inmotionhosting.com/.../

apijnappels · Answer

For nginx you need to put the following in your nginx.conf file: server_tokens off; 
 This will stop sending version information.

Override the server header

Top Replies