Detections
Analytics

1.5.3 Ensure 'LOGIN banner' is set

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Sets the LOGIN banner for access to the Command Line Interface (CLI)

Rationale:

Configuring banner is an additional security safeguard to protect the device. In fact, banners are deterrent controls meant to discourage attackers by letting them know that their access is illegitimate and the possible consequences of going further.

Solution

Run the following command to set the LOGIN banner where <line_of_message> is a line of the banner text.

HOSTNAME(CONFIG)#BANNER LOGIN <line_of_message>

Repeat the command for each line if the banner text has several lines.

See Also

https://benchmarks.cisecurity.org/tools2/cisco/CIS_Cisco_Firewall_Benchmark_v4.0.0.pdf

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-8

Plugin: Cisco

Control ID: bde0984f068609cc8a35400a4d04579d92046f4c2a221f9fd69d550268455f20