Post-authentication Banner

低レベル 1自動cisco-iosxr

説明

A post-authentication banner is displayed to the user after a successful login. It can also serve as a legal notice to authorized users of the equipment to notify them of any logging that may be configured. This banner is not appropriate to notify unauthorized users of any penalties to accessing the device, because after successful login corresponding laws might have already been violated. Post-authentication banners can be used to reduce the risk of human error. For example by highlighting the current environment (Production or Lab). Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

チェック方法

監査方法: 設定パターン

パターン: (?m)^banner exec \S

修正方法

修正方法: ガイダンスまたは IaC パッチ

! Configure an exec banner as shown below. The delimiter character shown is a "^", but any character can serve as a delimiter. banner exec ^ {exec_banner} ^

プロパティ

オペレーティングシステム: すべて
タグ: cisco-iosxrnetworkaaa
参照: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.7.2 Post-authentication Banner

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target cisco-iosxr