We need to hide the server header in HTTP respones. When I set the urlscan parameter, Removeserverheader to 1, the server header is not present in an HTTP response test. However, when the url for the login page to our site is accesed, a Page Cannot be Found error page displays with HTTP 400 bad request...

Hi everyone, I've been tasked to test URLScan 3.1 on an IIS 6.0. I have installed and configured according to setup instructions and added the SQL Injection rule. It works but only, it seems, at root level. For example, when testing a simple login page at the top level i.e. www.somesite.com/login...