PCI DSS Compliance scan failure

[cpac]

Hi,

This might be in the wrong place, so feel free to move it if so. Our most recent PCI DSS compliance scanned failed due to issues with the 3CX Debian kernel as well as not sending a HSTS header in the response on port 5001.

Is this fixable?

 

[florink]

If it sends HSTS on 5001 then you won't be able to access 5000 on HTTP should that is needed.

 

[cpac]

Thanks for the reply, we won't need HTTP access.