Cisco NX-OS
TMA-CISCO-NXOS-1.3.2
Post-authentication Banner
설명
A post-authentication banner is displayed to the user after a successful login. It can also serve as a legal notice to authorized users of the equipment to notify them of any logging that may be configured. This banner is not appropriate to notify unauthorized users of any penalties to accessing the device, because after successful login corresponding laws might have already been violated. Post-authentication banners can be used to reduce the risk of human error. For example by highlighting the current environment (Production or Lab). Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
점검 방법
감사 방식: 구성 패턴
- 패턴
(?m)^banner exec \S
조치 방법
조치 방식: 가이드 또는 인프라 패치
! Configure an exec banner as shown below. The delimiter character shown is a "^", but any character can serve as a delimiter. banner exec ^ > Enter your standard EXEC Banner text here. End with the same delimiter as used above > ^
속성
- 운영 체제
- 모두
- 태그
- cisco-nxosnetworkaaa
- 참고 자료
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.3.2 Post-authentication Banner
이 호스트 점검하기
감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.
tmaegis scan --target cisco-nxos