http trace vulnerability?

[FNB]

We're running Scalix 10 on RHEL 4. A recent security scan of the box showed that http trace is enabled http://xforce.iss.net/xforce/xfdb/11149.

Are we going to cause any problems with Scalix by disabling it? If not, how do you recommend disabling it?

[ScalixSupport]

According to the link you posted:

As a workaround, disable HTTP TRACE support on your Web server. HTTP TRACE support can be disabled on Apache HTTP Server using the mod_rewrite module and on Microsoft Internet Information Services (IIS) using the URLScan tool.

The mod_rewrite module is installed and loaded by default on all my apache servers with no ill effect.

Regards,
Don