ServerMask Screenshot

ServerMask 4 is the Internet Information Services (IIS) module that defeats the reconnaissance efforts of would-be attackers. ServerMask prevents dangerous information leakage from your IIS Web server and IIS-hosted Web applications. The following documentation reviews ServerMask's anti-reconnaissance features and describes how to configure ServerMask for optimum security in your Web server environment.

ServerMask from Port80 Software modifies your Web server?s "fingerprint" by removing unnecessary HTTP response data, modifying cookie values, and obscuring other response information. NEW in v4: 64-bit support, application-layer error suppression for PCI compliance, auto-generated decoy cookies and headers, completely redesigned UI, and per-site configuration.

ServerMask 4 retains the most valuable security features from prior versions, such as the ability to remove, change, or randomize the default IIS Server header; Support for serving files without identifying file extensions, emulation of non-IIS header order or Allow format, and customizable HTTP error messaging.

ServerMask is fully compatible with IIS 4, 5, and 6, IIS Lockdown, URLScan, FrontPage, Outlook Web Access, and major scripting platforms like ASP, ASP.NET, ColdFusion, PHP, JSP, and Perl. ServerMask is available for a free, fully-functional 30-day trial.