Ax-OS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to Ax-OS.
DISA Rule
SV-276006r1122668_rule
Vulnerability Number
V-276006
Group Title
SRG-APP-000070
Rule Version
AXOS-00-000030
Severity
CAT II
CCI(s)
- CCI-001384 - For publicly accessible systems, display system use information with organization-defined conditions before granting further access to the publicly accessible system.
- CCI-001385 - For publicly accessible systems, displays references, if any, to monitoring that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001386 - For publicly accessible systems, displays references, if any, to recording that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001387 - For publicly accessible systems, displays references, if any, to auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001388 - For publicly accessible systems, includes a description of the authorized uses of the system.
- CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.
Weight
10
Fix Recommendation
Select the gear icon (System Settings) >> GUI >> Login.
Under Login Page Settings >> Custom message (up to 3000 characters), enter the Standard Mandatory DOD Notice and Consent Banner text.
Click "Save".
Check Contents
Select the gear icon (System Settings) >> GUI >> Login.
Under Login Page Settings >> Custom message (up to 3000 characters), verify the Standard Mandatory DOD Notice and Consent Banner is displayed.
If the banner is not displayed, this is a finding.
Vulnerability Number
V-276006
Documentable
False
Rule Version
AXOS-00-000030
Severity Override Guidance
Select the gear icon (System Settings) >> GUI >> Login.
Under Login Page Settings >> Custom message (up to 3000 characters), verify the Standard Mandatory DOD Notice and Consent Banner is displayed.
If the banner is not displayed, this is a finding.
Check Content Reference
M
Target Key
5710
STIGQter: STIG Summary: Axonius Federal Systems Ax-OS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026: