i recently noticed that by deafault glassfish returns some interesing headers with every response. try this out:

curl -I yourdomain.com

HTTP/1.1 405 Request method 'HEAD' not supported
Server: GlassFish Server Open Source Edition  4.1.1 
X-Powered-By: Servlet/3.1 JSP/2.3 (GlassFish Server Open Source Edition  4.1.1  Java/Oracle Corporation/1.8)
Allow: GET
Content-Length: 1214
Content-Language: 
Content-Type: text/html;charset=UTF-8
Date: Tue, 15 Mar 2016 05:49:05 GMT

if you don’t find these headers neccesary (neither do i) you can disable with

asadmin set server.network-config.protocols.protocol.http-listener-1.http.xpowered-by=false

or in glassfish web interface.

this leaves out server header. to replace it we need to create jvm option called “product name”

asadmin create-jvm-options -Dproduct.name="MyProduct"

or in web interface. don’t forget to restart your domain.