Deactivate Web Directory BrowsingAs a security best practice, ensure that a user cannot browse through a directory because it can increase the risk of exposure to directory traversal attacks. Verify Server Tokens for the Apache2 ServerAs part of your system hardening process, verify server tokens for the Apache2 server. The Web server response header of an HTTP response can contain several fields of information. Information includes the requested HTML page, the Web server type and version, the operating system and version, and ports associated with the Web server. This information provides malicious users important information without the use of extensive tools. Deactivate the Trace Method for the Apache2 ServerIn standard production operations, use of diagnostics can reveal undiscovered vulnerabilities that lead to compromised data. To prevent misuse of data, deactivate the HTTP Trace method. Parent topic: Secure Configuration of vRealize Operations
