Ensure 'Login Banner' is set

FaibleNiveau 1Automatiséecheckpoint

Description

Configure a login banner, ideally approved by the organization's legal team. This banner should, at minimum, prohibit unauthorized access, provide notice of logging or monitoring, and avoid using the word "welcome" or similar words of invitation. PASS requires set message banner on (with an organisation-defined msgvalue). Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?m)^set message banner on\b

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

set message banner on msgvalue "Authorized use only." save config # CIS guidance: Run the following command to enable and set the Banner. CLI: set message banner on msgvalue "Organization_Banner" GUI: Navigate to System Management > Messages Checked the Banner message and configured the organization defined banner.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: checkpointbanner
Référence: CIS Check Point Firewall Benchmark v1.1.0 - 2.1.1 Ensure 'Login Banner' is set

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target checkpoint