AAA, NAC, Guest Access & BYOD

Requirement:

This article describes how to disable PHP header response from the Guest operator or captive portal page.

Users can see the PHP version using "X-Powered-By” option in the HTTP Header.  X-Powered-By option is used to display what type of technology used in the page. You can get the below output from the browser Inspect element.

We can disable this option from the Guest operator and Captive portal page. 

Login to Policy Manager: Administration » Server Manager » Server Configuration – Select the SERVER > Service Parameters > ClearPass system services: Include PHP header in web server response > False.

Follow the below steps to verify:

• Access Guest operator or Captive portal page
• Right click and option Inspect element > Network > Select any page > Response Headers
• X-Powered-By field will not be available in the HTTP Header.

Note: Below output is from Firefox browser. The navigation would be same for other browsers as well.