STIGQter: STIG Summary: Forescout Network Device Management Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Forescout must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.

DISA Rule

SV-230935r1113787_rule

Vulnerability Number

V-230935

Group Title

SRG-APP-000069-NDM-000216

Rule Version

FORE-NM-000060

Severity

CAT III

CCI(s)

• CCI-000050 - Retain the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the system.

Weight

10

Fix Recommendation

Configure banner retention.

1. From the UI, select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
2. Select the "Login" tab and check the "Before login, prompt user to accept these Terms and Conditions".
3. Select "Apply" to save the settings.

Check Contents

Verify Forescout retains the Standard Mandatory DOD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and takes explicit actions to log on for further access.

Attempt to log on to the Forescout device as a system administrator using the web management tool.

If Forescout does not retain the Standard Mandatory DOD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access, this is a finding.

Vulnerability Number

V-230935

Documentable

False

Rule Version

FORE-NM-000060

Severity Override Guidance

Verify Forescout retains the Standard Mandatory DOD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and takes explicit actions to log on for further access.

Attempt to log on to the Forescout device as a system administrator using the web management tool.

If Forescout does not retain the Standard Mandatory DOD-approved Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access, this is a finding.

Check Content Reference

M

Target Key

5245