Capacity
CCI-000048
Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.
20
Rule
Severity: Medium
Modify the System Login Banner
17
Rule
Severity: Medium
Modify the System Login Banner for Remote Connections
15
Rule
Severity: Medium
Enable GNOME3 Login Warning Banner
15
Rule
Severity: Medium
Set the GNOME3 Login Warning Banner Text
57
Rule
Severity: Medium
Enable SSH Warning Banner
7
Rule
Severity: Medium
Create Warning Banners for All FTP Users
2
Rule
Severity: Medium
Display the Standard Mandatory DoD Notice and Consent Banner until Explicit Acknowledgement
1
Rule
Severity: Low
The A10 Networks ADC must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Low
Apple iOS/iPadOS 15 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.
2
Rule
Severity: Medium
The ALG providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The Arista Multilayer Switch must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
The application server management interface must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
2
Rule
Severity: Medium
The Arista network device must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
The application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
1
Rule
Severity: Medium
The CA API Gateway providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The BlackBerry UEM server must be configured to display the required DoD warning banner upon administrator logon.
Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
2
Rule
Severity: Low
The Central Log Server must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the Central Log Server.
1
Rule
Severity: Medium
The FortiGate device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Medium
CounterACT, when providing user access control intermediary services, must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Low
CounterACT must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
Forescout must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
Google Android 12 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.
4
Rule
Severity: Low
Google Android 13 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
1
Rule
Severity: Medium
The HP FlexFabric Switch must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Low
The Standard Mandatory DoD Notice and Consent Banner must be displayed until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The HYCU VM console must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Low
The DataPower Gateway must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Low
IBM Aspera Faspex must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Low
IBM Aspera Shares must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Medium
The DataPower Gateway providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The MQ Appliance messaging server management interface must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Low
The MaaS360 MDM server must be configured to display the required DoD warning banner upon administrator logon.
Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
1
Rule
Severity: Medium
The MQ Appliance network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Medium
The WebSphere Application Server management interface must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Medium
The IBM z/VM LOGO Configuration file must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system.
1
Rule
Severity: Medium
The IBM z/VM TCP/IP FTP Server must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system and until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The Ivanti MobileIron Core server must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
1
Rule
Severity: Medium
MobileIron Sentry must display the Standard Mandatory DoD Notice and Consent Banner in the Sentry web interface before granting access to the device.
2
Rule
Severity: Medium
The ISEC7 EMM Suite must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the ISEC7 EMM Suite.
2
Rule
Severity: Low
The Jamf Pro EMM server must be configured to display the required DoD warning banner upon administrator logon.
Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
2
Rule
Severity: Medium
The Juniper router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
The Juniper SRX Services Gateway must display the Standard Mandatory DoD Notice and Consent Banner before granting access.
1
Rule
Severity: Low
The MobileIron Core v10 server must be configured to display the required DoD warning banner upon administrator logon. Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
2
Rule
Severity: Low
Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.
1
Rule
Severity: Low
Motorola Solutions Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.
1
Rule
Severity: Medium
SharePoint must display an approved system use notification message or banner before granting access to the system.
6
Rule
Severity: Medium
The network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
ONTAP must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Low
Nutanix AOS must display the standard Mandatory DoD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Low
Nutanix AOS must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access.
1
Rule
Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
2
Rule
Severity: Medium
The Riverbed NetProfiler must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Medium
Riverbed Optimization System (RiOS) must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Medium
The publicly accessible application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to Innoslate.
4
Rule
Severity: Low
Samsung Android must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.
2
Rule
Severity: Low
Splunk Enterprise must display the Standard Mandatory DOD Notice and Consent Banner and accept user acknowledgement before granting access to the application.
1
Rule
Severity: Medium
The Samsung SDS EMM must be configured to display the required DoD warning banner upon administrator logon.
Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
1
Rule
Severity: Low
The [selection: Samsung SDS EMM, MDM platform] must have the capability to display the DoD warning banner prior to establishing a user session.
1
Rule
Severity: Medium
Symantec ProxySG providing user access control intermediary services must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the network.
9
Rule
Severity: Low
Samsung Android must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
1
Rule
Severity: Medium
The Tanium Server console must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to The Tanium Server.
1
Rule
Severity: Low
Symantec ProxySG must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
3
Rule
Severity: Medium
The publicly accessible Tanium application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
2
Rule
Severity: Medium
The publicly accessible Tanium application must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.
2
Rule
Severity: Low
The TippingPoint SMS, TPS, and SMS client must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
The Tanium Operating System (TanOS) must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
2
Rule
Severity: Medium
The UEM server must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
1
Rule
Severity: Medium
The Workspace ONE UEM server must be configured to display the required DoD warning banner upon administrator logon.
Note: This requirement is not applicable if the TOE platform is selected in FTA_TAB.1.1 in the Security Target (ST).
2
Rule
Severity: Medium
The Remote Access VPN Gateway and/or client must display the Standard Mandatory DoD Notice and Consent Banner before granting remote access to the network.
2
Rule
Severity: Medium
The Department of Defense (DoD) logon banner must be displayed prior to any login attempt.
1
Rule
Severity: Low
The Apple iOS/iPadOS 16 device User Agreement must include the DOD advisory warning message.
3
Rule
Severity: Low
Apple iOS/iPadOS 17 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
2
Rule
Severity: Medium
Apple iOS/iPadOS 17 must implement the management setting: not share location data through iCloud.
2
Rule
Severity: Low
Apple iOS/iPadOS 16 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.
2
Rule
Severity: Medium
Apple iOS/iPadOS 16 must implement the management setting: Not share location data through iCloud.
1
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting remote access to the operating system.
1
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system via SSH.
1
Rule
Severity: Medium
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DoD Notice and Consent Banner before granting GUI access to the system.
3
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner before granting remote access to the operating system.
3
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via SSH.
3
Rule
Severity: Medium
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DOD Notice and Consent Banner before granting GUI access to the system.
2
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at remote log on.
2
Rule
Severity: Medium
The macOS system must enforce SSH to display the Standard Mandatory DOD Notice and Consent Banner.
3
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any publically accessible connection to the system.
2
Rule
Severity: Medium
The Ubuntu operating system must enable the graphical user logon banner to display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any local or remote connection to the system.
2
Rule
Severity: Medium
The Cisco ASA must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
The Cisco ASA remote access VPN server must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the network.
6
Rule
Severity: Medium
The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
6
Rule
Severity: Medium
The Cisco switch must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
For the local account of last resort, the Cisco ISE must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
The container platform must display the Standard Mandatory DoD Notice and Consent Banner before granting access to platform components.
2
Rule
Severity: Low
Google Android 13 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the Work Profile.
2
Rule
Severity: Medium
The HPE Nimble must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
4
Rule
Severity: Low
Google Android 14 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
2
Rule
Severity: Medium
The operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system.
2
Rule
Severity: Medium
SSMC must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
2
Rule
Severity: Medium
The HPE 3PAR OS must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
2
Rule
Severity: Medium
AIX must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote login access to the system.
2
Rule
Severity: Medium
The Department of Defense (DoD) login banner must be displayed immediately prior to, or as part of, graphical desktop environment login prompts on AIX.
2
Rule
Severity: Medium
The Department of Defense (DoD) login banner must be displayed during SSH, sftp, and scp login sessions on AIX.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must have a proper BANNER statement with the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS SSH daemon must be configured with the Department of Defense (DoD) logon banner.
2
Rule
Severity: Medium
IBM z/OS TN3270 Telnet Server configuration statement MSG10 text must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS UNIX Telnet Server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must have a proper banner statement with the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must indicate a BANNER statement with the proper content.
2
Rule
Severity: Medium
IBM z/OS must employ a session manager to manage display of the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS TN3270 Telnet server configuration statement MSG10 text must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS warning banner for the TN3270 Telnet server must contain the proper content of the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS UNIX Telnet Server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS UNIX Telnet server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The ICS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to users.
2
Rule
Severity: Medium
The Juniper EX switch must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
The ICS must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to manage the device.
6
Rule
Severity: Medium
The required legal notice must be configured to display before console logon.
2
Rule
Severity: Low
The Windows dialog box title for the legal banner must be configured.
2
Rule
Severity: Low
The Windows message title for the legal notice must be configured.
2
Rule
Severity: Low
The Windows dialog box title for the legal banner must be configured with the appropriate text.
2
Rule
Severity: Medium
Windows Server 2019 required legal notice must be configured to display before console logon.
2
Rule
Severity: Low
Windows Server 2019 title for legal banner dialog box must be configured with the appropriate text.
2
Rule
Severity: Medium
Windows Server 2022 required legal notice must be configured to display before console logon.
2
Rule
Severity: Low
Windows Server 2022 title for legal banner dialog box must be configured with the appropriate text.
1
Rule
Severity: Medium
OL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via an SSH logon.
2
Rule
Severity: Medium
OL 8 must display a banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
OL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
OL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
2
Rule
Severity: Medium
The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
The Oracle Linux operating system must display the approved Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
2
Rule
Severity: Medium
The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts.
2
Rule
Severity: Low
The Palo Alto Networks security platform must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Medium
The Automation Controller management interface must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
2
Rule
Severity: Low
OpenShift must display the Standard Mandatory DOD Notice and Consent Banner before granting access to platform components.
1
Rule
Severity: Medium
RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.
2
Rule
Severity: Medium
RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
1
Rule
Severity: Medium
The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Red Hat Enterprise Linux operating system must display the approved Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
1
Rule
Severity: Medium
The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts.
2
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface.
3
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access via local console.
2
Rule
Severity: Medium
RHEL 8 must display a banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
2
Rule
Severity: Medium
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.
3
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access via SSH.
2
Rule
Severity: Medium
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
RHEL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.
2
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface (GUI).
4
Rule
Severity: Low
The operating system must display the DoD approved system use notification message or banner before granting access to the system for general system logons.
4
Rule
Severity: Low
The operating system must display the DoD approved system use notification message or banner for SSH connections.
4
Rule
Severity: Low
The GNOME service must display the DoD approved system use notification message or banner before granting access to the system.
4
Rule
Severity: Low
The FTP service must display the DoD approved system use notification message or banner before granting access to the system.
2
Rule
Severity: Low
Splunk Enterprise must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the server.
2
Rule
Severity: Medium
The VMM must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
4
Rule
Severity: Medium
The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).
4
Rule
Severity: Medium
The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via Secure Shell (SSH).
1
Rule
Severity: Medium
The ESXi host SSH daemon must be configured with the DOD logon banner.
3
Rule
Severity: Medium
The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.
3
Rule
Severity: Medium
The ESXi host Secure Shell (SSH) daemon must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Medium
The Photon operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting Secure Shell (SSH) access.
1
Rule
Severity: Medium
The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before login.
3
Rule
Severity: Medium
The Photon operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
1
Rule
Severity: Low
Zebra Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.
1
Rule
Severity: Medium
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to resources.
1
Rule
Severity: Low
The BIG-IP appliance must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
1
Rule
Severity: Medium
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to SSH.
1
Rule
Severity: Low
The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to virtual servers.
1
Rule
Severity: Medium
The macOS system must display a policy banner at remote login.
1
Rule
Severity: Medium
The macOS system must enforce SSH to display a policy banner.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
1
Rule
Severity: Medium
Ubuntu 22.04 LTS must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
1
Rule
Severity: Medium
Ubuntu 22.04 LTS must enable the graphical user logon banner to display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.
1
Rule
Severity: Medium
Ubuntu 22.04 LTS must display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.
1
Rule
Severity: Medium
The Mission Owner must configure the cloud service offering (CSO)-provided customer logon banner to display the Standard Mandatory DOD Notice and Consent Banner before granting access to users that must log on.
1
Rule
Severity: Medium
The Dragos Platform must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
1
Rule
Severity: Medium
The Enterprise Voice, Video, and Messaging Endpoint must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The Enterprise Voice, Video, and Messaging Session Manager must display the Standard Mandatory DOD Notice and Consent Banner before granting access to management sessions.
1
Rule
Severity: Medium
The F5 BIG-IP appliance must be configured to display the Standard Mandatory DOD Notice and Consent Banner upon access to the TMOS User Interface.
1
Rule
Severity: Medium
Google Android 14 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the Work Profile.
2
Rule
Severity: Low
Google Android 15 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
1
Rule
Severity: Medium
The ISEC7 SPHERE must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the ISEC7 SPHERE.
1
Rule
Severity: Medium
The Ivanti EPMM server must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
1
Rule
Severity: Medium
Sentry must display the Standard Mandatory DOD Notice and Consent Banner in the Sentry web interface before granting access to the device.
1
Rule
Severity: Low
MKE must display the Standard Mandatory DOD Notice and Consent Banner before granting access to platform components.
1
Rule
Severity: Medium
Microsoft Intune service must display the Standard Mandatory DOD Notice and Consent Banner and have the user acknowledge acceptance of the access conditions before granting access to the application.
1
Rule
Severity: Medium
OL 8 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via an SSH logon.
1
Rule
Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
1
Rule
Severity: Medium
RHEL 8 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.
1
Rule
Severity: Medium
SLEM 5 must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
1
Rule
Severity: Medium
SLEM 5 must display the Standard Mandatory DOD Notice and Consent Banner before granting access via SSH.
1
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting access via local console.
1
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting access via SSH.
1
Rule
Severity: Medium
TOSS must display the Standard Mandatory DoD Notice and Consent Banner or equivalent US Government Agency Notice and Consent Banner before granting local or remote access to the system.
1
Rule
Severity: Medium
The NSX Manager must display the Standard Mandatory DOD Notice and Consent Banner before granting access.
1
Rule
Severity: Low
Apple iOS/iPadOS 18 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.
1
Rule
Severity: Medium
Apple iOS/iPadOS 18 must implement the management setting: not share location data through iCloud.
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules