Detections
Analytics

1.5.2 Ensure 'EXEC banner' is set

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Sets the banner message for the access to the privileged EXEC mode

Rationale:

Configuring banner is an additional security safeguard to protect the device. In fact, banners are deterrent controls meant to discourage attackers by letting them know that their access is illegitimate and the possible consequences of going further.

Solution

Run the following command to set the EXEC banner where <line_of_message> is a line of the banner text.

HOSTNAME(CONFIG)#BANNER EXEC <line_of_message>

Repeat the command for each line if the banner text has several lines.

See Also

https://benchmarks.cisecurity.org/tools2/cisco/CIS_Cisco_Firewall_Benchmark_v4.0.0.pdf

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-8

Plugin: Cisco

Control ID: 2444b4df7d74ae2e142c321709392a29793f28a74df63cfe88dd5becc17d28f7