Identity Provider
Disable IIS header information on the Identity Provider
For security purposes, Milestone recommends that you disable the server header on the Identity Provider application.
The server header describes the software used by the originating server that handles a request. Disable this header by doing the following.
Note
This is only applicable for IIS 10 and above.
Open the IIS Manager.
Under the Default website, select IDP.
Open the Configuration Editor.
Select the section system.webServer/security/requestFiltering.
Set removeServerHeader to True.