Details
Configure a login banner, ideally approved by the organization’s legal team. This banner should, at minimum, prohibit unauthorized access, provide notice of logging or monitoring, and avoid using the word ‘welcome’ or similar words of invitation.
Rationale:
Through a properly stated login banner, the risk of unintentional access to the device by unauthorized users is reduced. Should legal action take place against a person accessing the device without authorization, the login banner greatly diminishes a defendant’s claim of ignorance.
Solution
Navigate to Device > Setup > Management > General Settings.
Set Login Banner as appropriate.
or
To remediate this setting using the CLI, execute the following command:
[email protected]#set deviceconfig system login-banner
Default Value:
Not configured
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Palo_Alto.