Post-authentication Banner

低レベル 1自動cisco-nxos

説明

A post-authentication banner is displayed to the user after a successful login. It can also serve as a legal notice to authorized users of the equipment to notify them of any logging that may be configured. This banner is not appropriate to notify unauthorized users of any penalties to accessing the device, because after successful login corresponding laws might have already been violated. Post-authentication banners can be used to reduce the risk of human error. For example by highlighting the current environment (Production or Lab). Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

チェック方法

監査方法: 設定パターン

パターン: (?m)^banner exec \S

修正方法

修正方法: ガイダンスまたは IaC パッチ

! Configure an exec banner as shown below. The delimiter character shown is a "^", but any character can serve as a delimiter. banner exec ^ > Enter your standard EXEC Banner text here. End with the same delimiter as used above > ^

プロパティ

オペレーティングシステム: すべて
タグ: cisco-nxosnetworkaaa
参照: CIS Cisco NX-OS Benchmark v1.2.0 - 1.3.2 Post-authentication Banner

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target cisco-nxos