Ax-OS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the Toolbox.
DISA Rule
SV-276007r1122671_rule
Vulnerability Number
V-276007
Group Title
SRG-APP-000070
Rule Version
AXOS-00-000035
Severity
CAT II
CCI(s)
- CCI-001384 - For publicly accessible systems, display system use information with organization-defined conditions before granting further access to the publicly accessible system.
- CCI-001385 - For publicly accessible systems, displays references, if any, to monitoring that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001386 - For publicly accessible systems, displays references, if any, to recording that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001387 - For publicly accessible systems, displays references, if any, to auditing that are consistent with privacy accommodations for such systems that generally prohibit those activities.
- CCI-001388 - For publicly accessible systems, includes a description of the authorized uses of the system.
Weight
10
Fix Recommendation
From the Axonius Toolbox (accessed via SSH) Main Actions Menu, select the following options:
Compliance Actions >> Advanced Compliance Actions >> Update SSH Banner Text
Enter the Standard Mandatory DOD Notice and Consent Banner text.
Check Contents
Access the Axonius Toolbox via Secure Shell (SSH) and verify the Standard Mandatory DOD Notice and Consent Banner is displayed.
If the banner is not displayed, this is a finding.
Vulnerability Number
V-276007
Documentable
False
Rule Version
AXOS-00-000035
Severity Override Guidance
Access the Axonius Toolbox via Secure Shell (SSH) and verify the Standard Mandatory DOD Notice and Consent Banner is displayed.
If the banner is not displayed, this is a finding.
Check Content Reference
M
Target Key
5710