Security Configurations
    • Dark
      Light

    Security Configurations

    • Dark
      Light

    Article summary

    Perform the following manual configuration:

    ETag Removal

    The following URL Rewrite outbound rule removes the ETag from the response header. This manual configuration depends on the URL Rewrite application being enabled in IIS.

    Web.config
    
    <system.webServer>
    
        <rewrite>
    
            <outboundRules>
    
                <rule name="Remove ETag">
    
                    <match serverVariable="RESPONSE_ETag" pattern=".+" />
    
                    <action type="Rewrite" />
    
                </rule>
    
            </outboundRules>
    
        </rewrite>
    
    </system.webServer>

    IIS Default Page Disclosed

    The Error Page can be designated as the default page for the IIS Default Website. The following files are accessible within the LCMConsole application and can be copied to the root directory of the Default WebSite.

    • LCMConsole > error.htm to DefaultWebSite>error.htm

    • LCMConsole > img > error.png to DefaultWebSite> > img > error.png

    Web.config
    
       <system.webServer>
    
        <defaultDocument enabled="true">
    
            <files>
    
            </files>
    
        </defaultDocument>        
    
           </system.webServer>

    Error Page Configuration

    The error page is set to the IIS Default Website to display when attempting to access unauthorized or unavailable resources. The following files from the LCMConsole application are available for copying to the root directory of the Default Website:

    • LCMConsole > error.htm to DefaultWebSite>error.htm

    • LCMConsole > img > error.png to DefaultWebSite> > img > error.png

    Web.config
    
        <system.web>
    
        <customErrors mode="On">
    
          <error statusCode="500" redirect="error.htm?code=500" />
    
          <error statusCode="503" redirect="error.htm?code=503" />
    
          <error statusCode="400" redirect="error.htm?code=400" />
    
          <error statusCode="403" redirect="error.htm?code=403" />
    
          <error statusCode="404" redirect="error.htm?code=404" />
    
          <error statusCode="401" redirect="error.htm?code=401" />
    
          <error statusCode="402" redirect="error.htm?code=402" />
    
          <error statusCode="405" redirect="error.htm?code=405" />
    
          <error statusCode="406" redirect="error.htm?code=406" />
    
          <error statusCode="412" redirect="error.htm?code=412" />
    
          <error statusCode="502" redirect="error.htm?code=502" />
    
          <error statusCode="501" redirect="error.htm?code=501" />
    
        </customErrors>
    
    </system.web>


    Was this article helpful?

    Changing your password will log you out immediately. Use the new password to log back in.
    First name must have atleast 2 characters. Numbers and special characters are not allowed.
    Last name must have atleast 1 characters. Numbers and special characters are not allowed.
    Enter a valid email
    Enter a valid password
    Your profile has been successfully updated.
    ESC

    Eddy AI, facilitating knowledge discovery through conversational intelligence