STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The HPE Nimble must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

DISA Rule

SV-252188r960843_rule

Vulnerability Number

V-252188

Group Title

SRG-APP-000068-NDM-000215

Rule Version

HPEN-NM-000030

Severity

CAT II

CCI(s)

• CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.

Weight

10

Fix Recommendation

Type "group --edit --login_banner", and then copy-paste or type the required banner. Then, to display the banner before login, type "group --edit --login_banner_after_auth no".

Check Contents

Attempt a login to NimOS by typing "ssh username@array", where username is a valid user, and array is an array DNS name. If the correct DoD banner is not displayed before a password prompt, this is a finding.

Vulnerability Number

V-252188

Documentable

False

Rule Version

HPEN-NM-000030

Severity Override Guidance

Attempt a login to NimOS by typing "ssh username@array", where username is a valid user, and array is an array DNS name. If the correct DoD banner is not displayed before a password prompt, this is a finding.

Check Content Reference

M

Target Key

5460