Removing IIS server header from WebDeploy on port 8172

289 views Asked by At

I'm looking after a bit of server hardening for PCI DSS and can remove the headers from IIS no problem for standard sites but my compliance scanner is reporting (correctly) that port 8172 for MS Web deployment of packages is announcing the IIS/10 server header and that's a PCI compliance fail.

I've tried manually adding a URL Rewrite rule in C:\Windows\System32\inetsrv\config\administrator.config but that hasn't worked.

There don't appear to be any settings for controlling the WMSvc, Management Service whatever you want to call it.

Just asking in case anyone else has found the magic setting.

I know I could disable webdeploy between uses, firewall it or even not use it but I'm sure there must be an answer given how trivial it is!

Thanks

0

There are 0 answers