The ESXi host SSH daemon must be configured with the DOD logon banner.
An XCCDF Rule
Description
The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure use of a banner that does not provide easy attribution.
- ID
- SV-256383r958390_rule
- Version
- ESXI-70-000009
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
From an ESXi shell, add or correct the following line in "/etc/ssh/sshd_config":
Banner /etc/issue