Yesterday I found an answer. Tested - and it works as far as I need this implementation. The only thing to remember is to manually make these changes after ZCS updates/upgrades, as all configuration files are overwritten.
Here is the link on forum article:
[SOLVED] Nessus Security Scan Fail - Internal IP in HTTP Header
Read comment #4