Details

Sets the LOGIN banner for access to the Command Line Interface (CLI)

Rationale:

Configuring banner is an additional security safeguard to protect the device. In fact, banners are deterrent controls meant to discourage attackers by letting them know that their access is illegitimate and the possible consequences of going further.

Solution

Run the following command to set the LOGIN banner where is a line of the banner text.

hostname(config)#banner login

Repeat the command for each line if the banner text has several lines.

Default Value:

Disabled by default

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3246

This security hardening control applies to the following category of controls within NIST 800-53: Awareness and Training.This control applies to the following type of system Cisco.

References

• 800-53|AT-1
• 800-53|AT-2
• CSCv7|17.3

Source

• Tenable.com/audits