The firewall implementation must display the notification message on the screen until the administrator takes explicit action to acknowledge the message.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-37081	SRG-NET-000042-FW-000037	SV-48842r1_rule		Low

Description

All network devices must present a DoD-approved warning banner prior to a system administrator logging on. The banner should be acknowledged by the user prior to allowing the user access to the system. This provides assurance that the user has seen the message and accepted the conditions for access. If the warning banner is not acknowledged by the user, DoD will not be in compliance with system use notifications required by law.

STIG	Date
Firewall Security Requirements Guide	2013-04-24

Details

Check Text ( C-45454r1_chk )
Verify the user notification message remains on the screen until the administrator presses enter, logs in, or takes some other explicit action. If the warning banner is not displayed until the administrator takes explicit action, this is a finding.

Fix Text (F-42027r1_fix)
Configure the system to display the notification message on the system screen until the administrator either presses enter or takes action to login.