Remove the Copyright information in Login Screen (Copyright © 2017 NetIQ. All rights reserved. Build: NAAF-5.6).

For risk purposes, the product name should not be shown.

Comments

  • Please explain "for risk purposes"

  • Fully agree with OP. Security best practice dictates that you should never advertise the product or version as that provides too much recon to attackers.

  • This is being considered for a future version.

    Troy

  • Stefan - please confirm that this is done to your satisfaction in v6.0 agents.

    Troy

  • Hey Troy, I'm not sure about the agents, but my request is actually geared toward the web consoles (authenticator management portal, /admin URL, /helpdesk, etc). It's always security best practice to hide the specific versions to avoid cluing in attackers.

  • And unfortunately, in v6.0, the version is still being displayed on those admin/helpdesk/enduser portals.