How can I remove Server header for static content (e.g. javascript/css/images) that is server by ASP.NET Web Forms application that is hosted on IIS 10? I think I tried pretty much everything that I found and I still cannot get rid of it. Currently, I have:

1. removeServerHeader=”true” for requestFiltering:

<security><requestFiltering removeServerHeader="true">...

2. Managed modules enabled for all requests:

<modules runAllManagedModulesForAllRequests="true">...

3. Removed header in custom headers:

<httpProtocol> <customHeaders> <remove name="Server"/>

4. URL rewrite rule:

   Plain text

   Copy to clipboard

   Open code in new window

   EnlighterJS 3 Syntax Highlighter

   <code> <outboundRules rewriteBeforeCache="true">

   <rule name="Remove RESPONSE_Server" >

   <match serverVariable="RESPONSE_Server" pattern=".+" />

   <action type="Rewrite" value="" />

   </rule>

   </outboundRules>

   </code>

   <code> <outboundRules rewriteBeforeCache="true"> <rule name="Remove RESPONSE_Server" > <match serverVariable="RESPONSE_Server" pattern=".+" /> <action type="Rewrite" value="" /> </rule> </outboundRules> </code>

    <outboundRules rewriteBeforeCache="true">
        <rule name="Remove RESPONSE_Server" >
            <match serverVariable="RESPONSE_Server" pattern=".+" />
            <action type="Rewrite" value="" />
        </rule>
    </outboundRules>
   

5. And even Apache 2.4 reverse proxy with headers module enabled:

LoadModule headers_module modules/mod_headers.so

...

<IfModule headers_module>
    RequestHeader unset Server
</IfModule>```


> And I still get Server: Microsoft-IIS/10.0 added to static file
> responses. Please let me know what I am missing here or if there is
> anything else I can do to get rid of this header.