PCI Scan Apache/2 header

S

ssgill

Verified User
Joined
May 9, 2012
Messages
170
Hello, our pci scan test result flagged that apache server signature is showing Apache/2
According to the report it should be advertised just as "Apache"

expose php off
my server version is "Apache/2.4.62"

/etc/httpd/conf/extra/httpd-default.conf ( Comments removed )
Timeout 60
ProxyTimeout 1800
ProxyErrorOverride off
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 2
UseCanonicalName Off
AccessFileName .htaccess
ServerTokens Prod
ServerSignature Off
HostnameLookups Off
<IfModule reqtimeout_module>
RequestReadTimeout header=20-40,MinRate=500 body=20,MinRate=500
</IfModule>

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
</IfModule>

TraceEnable Off
<IfModule mod_headers.c>
RequestHeader unset Proxy early
</IfModule>
<IfModule Litespeed>
CacheRoot /home/lscache/
</IfModule>
Click to expand...
Anything that i need in addition to this for getting headers to only show Apache
Thanks
 
You must log in or register to reply here.
Back
Top