Get IISLockdown from Microsoft. The URLscan tool will allow you to specify whatever text you want to identification (or none at all).
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 27, 2002 3:02 PM To: [EMAIL PROTECTED] Subject: IIS version number? Can anyone tell me if their is a way to hide the IIS version number from external pen tests. I know it is possible in many Linux/UNIX apps like sendmail but I haven't seen it done with IIS. If it can be done, it's probably somewhere in the registry but the question is where. Thanks, Steve
