Web Server Information

The Web Server Information adapter provides information about the web server for a given website domain, including the server type, its version and operating system, the content management system (CMS) name and its version, the installed CMS plugins, versions and more.

Related Enforcement Actions:
Web Server Information - Enrich Asset Data

Adapter Parameters

1. Web Server Domain (required) - Website URL, hostname or an IP address.
2. Web Server Ports (required, comma separated, default: 443) - Specify the ports to connect to in order to fetch the web server information.
3. Web server domain list - Upload a JSON file with a list of domains. This allows you to add add a large number of domains in one go. The format of the JSON file should be:

[
  {
    "domain": "",
    "port": "",
    "https_proxy": "",
    "verify_ssl": ""
  },
  {
    "domain": "",
    "port": "",
    "https_proxy": "",
    "verify_ssl": ""
  },
  {
    "domain": "",
    "port": "",
    "https_proxy": "",
    "verify_ssl": ""
  }
]

5. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to Web Server Domain.
   • If supplied, Axonius will utilize the proxy when connecting to the host defined for this connection.
   • If not supplied, Axonius will connect directly to the host defined for this connection.

Configuring Web Server Information Advanced Settings

To configure the Web Server Information adapter advanced settings, open the Web Server Information Adapter page, click Advanced Settings, and then click the Web Server Information Configuration tab:

1. Fetch data from SSL scanner (required, default: False) - Check this option to fetch data from Qualys SSL Labs.

   • When this is enabled this will enrich device data with SSL Labs data, that includes information about the server host, its endpoints and indications on exposure to known SSL vulnerabilities, such as Heartbleed and POODLE.
     • To enrich device with data from Qualys SSL Labs:
       • Host name is required in the Web Server Domain field (see Adapter Parameters). If the device data does not include a host name, one of the following can be used:
         • Device IP address, that must be a public IP address.
         • Domain, if fetched as part of the SSL Certificate data.
       • Port 443 must be opened for Axonius to use the SSL Labs API.

2. Qualys SSL Labs API v4 registered email (optional) - This field is available only when Fetch data from SSL scanner is enabled. Enter a Qualys SSL Labs API v4 registered email. To register a valid email address via CLI, run the following command:

curl --location 'https://api.ssllabs.com/api/v4/register'  --header 'Content-Type: application/json' --data '{ "firstName":"John", "lastName":"Doe", "email":"john.doe@company.com", "organization":"Company"}'

3. Save Raw Data - Select this option to save raw data.