Layer 7 CA API Gateway - Web server HTTP header information disclosure

Products

• CA API Gateway

Issue/Introduction

It is observed that the Server header in the HTTP response reveals the running version from Server: Apache-Coyote/1.1. After intercepting the response, it is observed that the response header is showing information disclosure. How can he web server be configured such that sensitive response headers are not visible in the response?

Environment

All supported versions of the API Gateway

Resolution

Step 1: Connect to the policy manager for your SSG
Step 2: Go to Tasks --> Manage Listen Ports 
Step 3: Click on the port that is being connecting over, choose "Properties", and choose the "Advanced" tab.
Step 4: Click the "Add" button in the bottom right, the "Property Name" will be "server" and the value of your choosing to be displayed.