Cisco NX-OS
TMA-CISCO-NXOS-1.3.2
Post-authentication Banner
Description
A post-authentication banner is displayed to the user after a successful login. It can also serve as a legal notice to authorized users of the equipment to notify them of any logging that may be configured. This banner is not appropriate to notify unauthorized users of any penalties to accessing the device, because after successful login corresponding laws might have already been violated. Post-authentication banners can be used to reduce the risk of human error. For example by highlighting the current environment (Production or Lab). Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^banner exec \S
How it is fixed
Fix method: Guidance or infrastructure patch
! Configure an exec banner as shown below. The delimiter character shown is a "^", but any character can serve as a delimiter. banner exec ^ > Enter your standard EXEC Banner text here. End with the same delimiter as used above > ^
Properties
- Operating systems
- Any
- Tags
- cisco-nxosnetworkaaa
- Reference
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.3.2 Post-authentication Banner
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target cisco-nxos