How to disable the X-AspNetVersion HTTP header in Microsoft IIS - WKB203642

OBJECTIVE or GOAL

Prevent IIS from sending the X-AspNetVersion header in HTTP/S responses.

ENVIRONMENT

• Windows Server 2019/2016/2012

PROCEDURE

1. Open IIS Manager.
2. Connect to the local server.
3. Select the Default Web Site.
4. Double-click the Configuration Manager.
5. In the Section list, select system.web > httpRuntime.
6. Set the value of "enableVersionHeader" to False.
7. Click the Apply button.
8. Repeat steps 4 through 7 for all HTTP/S sites in IIS and all applications in Default Web Site.
9. Restart IIS.

ADDITIONAL INFORMATION

See article 202467 for guidance on determining if the header is no longer present in the HTTP replies from the server.