1.5.3 Ensure 'LOGIN banner' is set

Information

Sets the LOGIN banner for access to the Command Line Interface (CLI)

Rationale:

Configuring banner is an additional security safeguard to protect the device. In fact, banners are deterrent controls meant to discourage attackers by letting them know that their access is illegitimate and the possible consequences of going further.

Solution

Run the following command to set the LOGIN banner where <line_of_message> is a line of the banner text.

HOSTNAME(CONFIG)#BANNER LOGIN <line_of_message>

Repeat the command for each line if the banner text has several lines.

See Also

https://workbench.cisecurity.org/files/1903

Item Details

Category: AWARENESS AND TRAINING

References: 800-53|AT-1, 800-53|AT-2, CSCv7|17.3

Plugin: Cisco

Control ID: bde0984f068609cc8a35400a4d04579d92046f4c2a221f9fd69d550268455f20