Ensure login disclaimer is set

LowLevel 1Manual reviewsophos

Description

Configure a login disclaimer, ideally approved by the organization's legal team. This banner should at minimum prohibit unauthorized access, provide notice of logging or monitoring, and avoid using the word "welcome" or similar words of invitation. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Navigate to 'System > Administration > Admin and User Settings > Login Disclaimer Settings'. Verify 'Enable login disclaimer' is checked and disclaimer message is set appropriately.

How it is fixed

Fix method: Guidance or infrastructure patch

Navigate to 'System > Administration > Admin and User Settings > Login Disclaimer Settings'. 'Enable login disclaimer' is checked and set the disclaimer message appropriately.

Properties

Operating systems: Any
Tags: sophosbanner
Reference: CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.2 Ensure login disclaimer is set