Hide Server Information When HTTP GET to Expressway C

[ilhambasuki]

Hi,

Our security team found out that there is server information when using HTTP GET Request to Expressway C. I attached the capture. I'd like to know if we can hide that server information or at least changing it to other name. Since this information can be used by hacker to attack Expressway C.

I know we can do that in debian linux using Mod Security, but I found out that there is no way to install that on Expressway linux.

Any input is welcome. Hope someone have this same issue and know how to mitigate this.

Thanks.

[b.winter · Accepted solution]

No, there is no way. Simple answer: The Expressway-OS is not a "standard" Linux and therefore, you cannot manage it like a standard Linux. It's a Cisco customized Linux.

[ilhambasuki]

Thanks for you response. I guest it is what it is, and we will try to discuss it with our security team.

[b.winter]

@ilhambasuki Any further questions here? I guess, your answer was clarified.