800-53|AC-8a.

Title

SYSTEM USE NOTIFICATION

Description

Displays to users [Assignment: organization-defined system use notification message or banner] before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance and states that:

Reference Item Details

Category: ACCESS CONTROL

Family: ACCESS CONTROL

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1 Ensure 'Login Banner' is setPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.1.1 Ensure 'Login Banner' is setPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.2 Enable SSH (Banner)UnixCIS FreeBSD v1.0.5
1.2.2 - MobileIron - Enable 'Show security warnings' - 'Samsung SAFE'MDMMobileIron - CIS Google Android 4 v1.0.0 L1
1.3 Configure SSH - Check if Banner is not commented for serverUnixCIS Solaris 9 v1.3
1.7.1.7 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - sshd_configUnixCIS Amazon Linux 2 STIG v1.0.0 L3
1.7.2 Ensure GDM login banner is configured - 'banner-message-enable'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'banner-message-enable'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'file-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'file-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'system-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'system-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'user-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'user-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - file-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - file-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - system-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - system-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - user-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1
1.7.2 Ensure GDM login banner is configured - user-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.1
1.7.3 Ensure the Standard Mandatory DoD Notice and Consent Banner are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.7.8 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - issueUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.7.8 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - sshd_configUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.2 Ensure GDM login banner is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Debian Linux 11 Server L1 v1.0.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Debian Linux 11 Workstation L1 v1.0.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0
1.8.5 Ensure Standard Mandatory DoD Notice and Consent Banner displayed via a graphical user logonUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.1.1 Ensure 'Login Banner' is set - message banner msgvalueCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.1 Ensure 'Login Banner' is set - message banner onCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.2 Ensure 'Message Of The Day (MOTD)' is set - motd banner msgvalueCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.2 Ensure 'Message Of The Day (MOTD)' is set - motd banner onCheckPointCIS Check Point Firewall L1 v1.1.0
2.2.5 - Configuring SSH - banner configuration - 'Banner = /etc/motd'UnixCIS AIX 5.3/6.1 L1 v1.1.0
2.4.8 - CDE - login screen hostname masking - 'dtlogin*greeting.labelString is set to appropriate text'UnixCIS AIX 5.3/6.1 L1 v1.1.0
2.4.8 - CDE - login screen hostname masking - 'dtlogin*greeting.persLabelString is set to appropriate text'UnixCIS AIX 5.3/6.1 L1 v1.1.0
3.2 Data ONTAP (Software) Mgmt - 'ssh2.banner.enable = on'NetAppTNS NetApp Data ONTAP 7G
3.6.1.8 CDE - login screen hostname masking - dtlogin.greeting.labelStringUnixCIS IBM AIX 7.1 L1 v2.0.0
3.6.1.8 CDE - login screen hostname masking - dtlogin.greeting.persLabelStringUnixCIS IBM AIX 7.1 L1 v2.0.0
3.6.2.3 OpenSSH - Banner - banner pathUnixCIS IBM AIX 7.1 L1 v2.0.0
3.6.6.2 FTP: Display acceptable usage policy during loginUnixCIS IBM AIX 7.1 L1 v2.0.0
3.011 - The required legal notice must be configured to display before console logon.WindowsDISA Windows Vista STIG v6r41
3.014 - The Windows dialog box title for the legal banner must be configured.WindowsDISA Windows Vista STIG v6r41
4.1 - System Administration Methods - Login BannerNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
4.1 - System Administration Methods - Message of the DayNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
11.3 Set Graphical Warning Banner - banner-message-enableUnixCIS Debian Linux 7 L1 v1.0.0