Capacity
CCI-000050
Retain the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the system.
20
Rule
Severity: Medium
Modify the System Login Banner
15
Rule
Severity: Medium
Enable GNOME3 Login Warning Banner
57
Rule
Severity: Medium
Enable SSH Warning Banner
2
Rule
Severity: Medium
Modify the System GUI Login Banner
2
Rule
Severity: Medium
Display the Standard Mandatory DoD Notice and Consent Banner until Explicit Acknowledgement
2
Rule
Severity: Medium
The ALG providing user access control intermediary services must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Medium
The application server management interface must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Medium
The Arista network device must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
The application must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The CA API Gateway providing user access control intermediary services must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Low
The Central Log Server must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The FortiGate device must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Low
CounterACT, when providing user access control intermediary services, must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Low
CounterACT must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
2
Rule
Severity: Low
Forescout must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Medium
The HP FlexFabric Switch must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Low
The Standard Mandatory DoD Notice and Consent Banner must be displayed until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The HYCU VM console must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Medium
The DataPower Gateway must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Medium
The DataPower Gateway providing user access control intermediary services must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The WebSphere Application Server management interface must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The IBM z/VM TCP/IP FTP Server must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system and until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The IBM z/VM LOGO configuration file must be configured to display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Medium
The network device must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Low
Nutanix AOS must display the standard Mandatory DoD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Low
Nutanix AOS must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access.
1
Rule
Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
2
Rule
Severity: Medium
The Riverbed NetProfiler must be configured to retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
1
Rule
Severity: Medium
The publicly accessible application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to Innoslate.
1
Rule
Severity: Medium
The Tanium Server console must be configured to retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
3
Rule
Severity: Medium
The publicly accessible Tanium application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
2
Rule
Severity: Medium
The publicly accessible Tanium application must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Low
The TippingPoint SMS, TPS, and SMS client must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
2
Rule
Severity: Low
The UEM server must retain the access banner until the user acknowledges acceptance of the access conditions.
2
Rule
Severity: Medium
The Remote Access VPN Gateway and/or client must enforce a policy to retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system via SSH.
1
Rule
Severity: Medium
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DoD Notice and Consent Banner before granting GUI access to the system.
3
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via SSH.
3
Rule
Severity: Medium
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DOD Notice and Consent Banner before granting GUI access to the system.
2
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at remote log on.
2
Rule
Severity: Medium
The macOS system must enforce SSH to display the Standard Mandatory DOD Notice and Consent Banner.
3
Rule
Severity: Medium
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.
1
Rule
Severity: Medium
The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.
2
Rule
Severity: Low
The container platform must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage and conditions and take explicit actions to log on for further access.
2
Rule
Severity: Medium
The operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must have a proper BANNER statement with the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS TN3270 Telnet Server configuration statement MSG10 text must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS UNIX Telnet Server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must have a proper banner statement with the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
IBM z/OS FTP.DATA configuration statements must indicate a BANNER statement with the proper content.
2
Rule
Severity: Medium
IBM z/OS TN3270 Telnet server configuration statement MSG10 text must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS warning banner for the TN3270 Telnet server must contain the proper content of the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS UNIX Telnet Server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The IBM z/OS UNIX Telnet server etc/banner file must have the Standard Mandatory DoD Notice and Consent Banner.
2
Rule
Severity: Medium
The ICS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to users.
2
Rule
Severity: Medium
The ICS must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to manage the device.
6
Rule
Severity: Medium
The required legal notice must be configured to display before console logon.
2
Rule
Severity: Medium
Windows Server 2019 required legal notice must be configured to display before console logon.
2
Rule
Severity: Medium
Windows Server 2022 required legal notice must be configured to display before console logon.
2
Rule
Severity: Medium
The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
2
Rule
Severity: Medium
The Automation Controller management interface must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
1
Rule
Severity: Medium
The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts.
2
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface.
4
Rule
Severity: Medium
The SUSE operating system file /etc/gdm/banner must contain the Standard Mandatory DoD Notice and Consent banner text.
2
Rule
Severity: Medium
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface (GUI).
4
Rule
Severity: Low
The GNOME service must display the DoD approved system use notification message or banner before granting access to the system.
2
Rule
Severity: Medium
The VMM must retain the Standard Mandatory DoD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
4
Rule
Severity: Medium
The ESXi host must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system via the Direct Console User Interface (DCUI).
3
Rule
Severity: Medium
The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before logon.
1
Rule
Severity: Medium
The vCenter Server must display the Standard Mandatory DOD Notice and Consent Banner before login.
1
Rule
Severity: Low
The BIG-IP APM module must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Low
The BIG-IP Core implementation must be configured to retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The macOS system must display a policy banner at remote login.
1
Rule
Severity: Medium
The macOS system must enforce SSH to display a policy banner.
1
Rule
Severity: Medium
The Dragos Platform must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
1
Rule
Severity: Medium
The Enterprise Voice, Video, and Messaging Endpoint must be configured to retain the Standard Mandatory DOD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to the network.
1
Rule
Severity: Medium
The Enterprise Voice, Video, and Messaging Session Manager must retain the Standard Mandatory DOD Notice and Consent Banner on the screen for management sessions until admins acknowledge the usage conditions and take explicit actions to log on for further access.
1
Rule
Severity: Medium
The F5 BIG-IP appliance must be configured to display the Standard Mandatory DOD Notice and Consent Banner when accessing via SSH.
1
Rule
Severity: Medium
Microsoft Intune service must display the Standard Mandatory DOD Notice and Consent Banner and have the user acknowledge acceptance of the access conditions before granting access to the application.
1
Rule
Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
1
Rule
Severity: Medium
The NSX Manager must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules