1.1.1 Ensure 'Login Banner' is set

Information

Configure a login banner, ideally approved by the organization's legal team. This banner should, at minimum, prohibit unauthorized access, provide notice of logging or monitoring, and avoid using the word 'welcome' or similar words of invitation.
Rationale:
Through a properly stated login banner, the risk of unintentional access to the device by unauthorized users is reduced. Should legal action take place against a person accessing the device without authorization, the login banner greatly diminishes a defendant's claim of ignorance.

Solution

Navigate to Device > Setup > Management > General Settings.
Set Login Banner as appropriate.
or
To remediate this setting using the CLI, execute the following command:
[email protected]#set deviceconfig system login-banner <value>
Default Value:
Not configured

See Also

https://workbench.cisecurity.org/files/1780

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-8a.

Plugin: Palo_Alto

Control ID: 061d5535d67447f5b71eefb00f8e106468f94cd731cc73728b2e0069ab2c9f71