I have set "ServerTokens ProductOnly" for apache2 in /etc/apache2/apache2.conf and it is working perfectly (only showing Apache). Then I have tried to set it also for ispconfig (httpd = apache1) but it is not working. I've tried to put it in the following files (with no result after restarting ispconfig_server): /root/ispconfig/httpd/conf/httpd.conf /root/ispconfig/httpd/conf/httpd.conf_http /root/ispconfig/httpd/conf/httpd.conf_https I have not tried to reboot the server, but I don't think that it would help. Does anyone know where to set such an important option for security? Thanks in advance.