Most likely you do not want these headers to be displayed in your responses:
- Server Microsoft-IIS/7.5
- X-AspNetMvc-Version 3.0
- X-AspNet-Version 4.0.303319
- X-Powered-By ASP.NET
Removing X-AspNet-Version
In web.config add this:
<system.web>
<httpRuntime enableVersionHeader="false"/>
Removing X-AspNetMvc-Version
In Global.asax.cs add this line:
protected void Application_Start()
{
MvcHandler.DisableMvcResponseHeader = true;
}
Removing or changing Server
In Global.asax.cs add this:
protected void Application_PreSendRequestHeaders()
{
//Response.Headers.Remove("Server");
Response.Headers.Set("Server","FooServer");
Response.Headers.Remove("X-AspNet-Version"); //alternative to above solution
Response.Headers.Remove("X-AspNetMvc-Version"); //alternative to above solution
}
Removing or changing X-Powered-By
IIS 7 - You can also remove the X-Powered-By header by including these lines to the <system.webServer> element:
<httpProtocol>
<customHeaders>
<remove name="X-Powered-By" />
</customHeaders>
</httpProtocol>
or manually go to IIS7 Management Console and open HTTP Response Headers