Disabling server or platform version information returned in HTTP headers

[PN_9671807]

How to disable the Apache Tomcat version returned in HTTP headers while loading Thingworx.

[odukiya]

Hello @PN_9671807 

I am confused regarding your question here. DO you mean that you want to disable tomcat version info in http errors returned by thingworx?

Please refer following article and please feel free to revert in case it doesn't resolve your problem.

https://www.ptc.com/en/support/article/CS300879

Thanks

Om Dukiya

[PN_9671807]

Hi,

Thanks for the response.

My issue is we have performed an Vulnerability Test on Sever where Apache tomcat/Thingworx is running and as part of Assessment, the Security Team suggested these things need to be corrected:

apache server disclosed on below resolved IP and Best practices recommend is disabling server and/or platform version information returned in HTTP headers.