IIS 7 modifies HTTP header information--delete server, x-powered-by, etc.

Delete x-powered-by HTTP Header

The methods for removing x-powered-by HTTP headers in IIS7 are:

1 Start the IIS Manager

2 Click the computer name

3 Select the site you need to modify and double-click the HTTP response header

4 All the custom HTTP headers are here, delete the corresponding headers just click the Remove button to the right

Delete X-aspnet-version HTTP Header

Modify the Web. config configuration file to add the following line within the <system.web> block

Delete X-aspnetmvc-version HTTP Header

Set the Disablemvcresponseheader property of the Mvchandler class to true in the Application_Start event of Global.asax

Mvchandler.disablemvcresponseheader = True

Remove the server HTTP header

Download URLScan

Download the setup MSI file for UrlScan 3.1 from one of the following URLs to your computer:

x86:http://www.microsoft.com/downloads/details.aspx?familyid=ee41818f-3363-4e24-9940-321603531989

X64:http://www.microsoft.com/downloads/details.aspx?familyid=361e5598-c1bd-46b8-b3e7-3980e8bdf0de

After you install URLScan (you need to install Iis-metabase, the IIS 6 Metabase compatibility component),

Modify the C:\Windows\System32\inetsrv\urlscan\UrlScan.ini file, set the removeserverheader=1

Then restart IIS

IIS 7 modifies HTTP header information--delete server, x-powered-by, etc.