800-53|AC-8a.

Title

SYSTEM USE NOTIFICATION

Description

Displays to users [Assignment: organization-defined system use notification message or banner] before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance and states that:

Reference Item Details

Category: ACCESS CONTROL

Family: ACCESS CONTROL

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1 Ensure 'Login Banner' is setPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.1.1 Ensure 'Login Banner' is setPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.2 Enable SSH (Banner)UnixCIS FreeBSD v1.0.5
1.3 Configure SSH - Check if Banner is not commented for serverUnixCIS Solaris 9 v1.3
1.7.1.7 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - sshd_configUnixCIS Amazon Linux 2 STIG v1.0.0 L3
1.7.2 Ensure GDM login banner is configured - 'banner-message-enable'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'banner-message-enable'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'file-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'file-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'system-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'system-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'user-db'UnixCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - 'user-db'UnixCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - file-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - file-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - system-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - system-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - user-dbUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
1.7.2 Ensure GDM login banner is configured - user-dbUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
1.7.3 Ensure the Standard Mandatory DoD Notice and Consent Banner are configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.7.8 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - issueUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.7.8 Ensure the Standard Mandatory DoD Notice and Consent Banner are configured - sshd_configUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.2 Ensure GDM login banner is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0
1.8.2 Ensure GDM login banner is configured - banner-message-enableUnixCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0
1.8.5 Ensure Standard Mandatory DoD Notice and Consent Banner displayed via a graphical user logonUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.1.1 Ensure 'Login Banner' is set - message banner msgvalueCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.1 Ensure 'Login Banner' is set - message banner onCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.2 Ensure 'Message Of The Day (MOTD)' is set - motd banner msgvalueCheckPointCIS Check Point Firewall L1 v1.1.0
2.1.2 Ensure 'Message Of The Day (MOTD)' is set - motd banner onCheckPointCIS Check Point Firewall L1 v1.1.0
2.2.5 - Configuring SSH - banner configuration - 'Banner = /etc/motd'UnixCIS AIX 5.3/6.1 L1 v1.1.0
2.4.8 - CDE - login screen hostname masking - 'dtlogin*greeting.labelString is set to appropriate text'UnixCIS AIX 5.3/6.1 L1 v1.1.0
2.4.8 - CDE - login screen hostname masking - 'dtlogin*greeting.persLabelString is set to appropriate text'UnixCIS AIX 5.3/6.1 L1 v1.1.0
2.12.11 - Miscellaneous Config - 'ftp banner is set to appropriate text'UnixCIS AIX 5.3/6.1 L1 v1.1.0
3.2 Data ONTAP (Software) Mgmt - 'ssh2.banner.enable = on'NetAppTNS NetApp Data ONTAP 7G
3.011 - The required legal notice must be configured to display before console logon.WindowsDISA Windows Vista STIG v6r41
3.014 - The Windows dialog box title for the legal banner must be configured.WindowsDISA Windows Vista STIG v6r41
4.1 - System Administration Methods - Login BannerNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
4.1 - System Administration Methods - Message of the DayNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
4.1 Ensure SharePoint displays an approved system use notification message or banner before granting access to the system.WindowsCIS Microsoft SharePoint 2019 OS v1.0.0
4.1 Ensure SharePoint displays an approved system use notification message or banner before granting access to the system.WindowsCIS Microsoft SharePoint 2016 OS v1.1.0
4.2.5 Configuring SSH - banner configuration - ssh_bannerUnixCIS IBM AIX 7.1 L1 v1.1.0
4.2.5 Configuring SSH - banner configuration - sshd_configUnixCIS IBM AIX 7.1 L1 v1.1.0
4.37 init.ora - 'sec_user_audit_action_banner = /path/to/warning.txt'UnixCIS v1.1.0 Oracle 11g OS L1
4.37 init.ora - 'sec_user_audit_action_banner = /path/to/warning.txt'WindowsCIS v1.1.0 Oracle 11g OS Windows Level 1
4.38 sqlnet.ora - 'sec_user_unauthorized_access_banner = /path/to/warning.txt'WindowsCIS v1.1.0 Oracle 11g OS Windows Level 1
4.38 sqlnet.ora - 'sec_user_unauthorized_access_banner = /path/to/warning.txt'UnixCIS v1.1.0 Oracle 11g OS L1
11.3 Set Graphical Warning Banner - banner-message-enableUnixCIS Debian Linux 7 L1 v1.0.0