Product Info
ServerMask 4 is the Internet Information Services (IIS) module that defeats the reconnaissance efforts of would-be attackers. ServerMask prevents dangerous information leakage from your IIS Web server and IIS-hosted Web applications. The following documentation reviews ServerMask's anti-reconnaissance features and describes how to configure ServerMask for optimum security in your Web server environment.
ServerMask from Port80 Software modifies your Web server’s "fingerprint" by removing unnecessary HTTP response data, modifying cookie values, and obscuring other response information. NEW in v4: 64-bit support, application-layer error suppression for PCI compliance, auto-generated decoy cookies and headers, completely redesigned UI, and per-site configuration.
ServerMask 4 retains the most valuable security features from prior versions, such as the ability to remove, change, or randomize the default IIS Server header; Support for serving files without identifying file extensions, emulation of non-IIS header order or Allow format, and customizable HTTP error messaging.
ServerMask is fully compatible with IIS 4, 5, and 6, IIS Lockdown, URLScan, FrontPage, Outlook Web Access, and major scripting platforms like ASP, ASP.NET, ColdFusion, PHP, JSP, and Perl. ServerMask is available for a free, fully-functional 30-day trial.
What's new in current version
64-bit support, new UI 100% managed code, new features & improved functionality
Requirements
IIS 4, 5, 5.1, or 6.0 and Windows NT, 2000, XP, or Server 2003
Please contact ServerMask publisher, Port80 Software if you have questions or issues regarding this product.