ASA WebVPN banner disclosure

[sasa.popravak]

Hello guys.

After a security scan, the finding was that ASA reveals to much information on TCP/443 port. For example, a simple nmap scan shows:

PORT STATE SERVICE VERSION
443/tcp open ssl/http Cisco ASA SSL VPN

while the scanner (I don't know which one) shows:

The remote host is running CISCO ASA 5500.

So the question is, is it possible to remove or alter this information?

The ASA is running 9.8(4)7 code.

Thanks.

[Marvin Rhoads]

It cannot be removed unless you aren't using the ASA for SSL VPN.

[sasa.popravak]

Thanks Marvin.

The ASA is used for SSL VPN. So, in that case this information cannot be
removed?

This applies for both clientless SSL, as well as AnyConnect?

Sasa

[Marvin Rhoads · Accepted solution]

Correct.

The answer I provided applies to both clientless and client-based SSL VPN.