The SSH daemon must be configured with the Department of Defense (DoD) login banner.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63187	ESXI-06-000009	SV-77677r1_rule		Medium

Description
The warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers. Alternatively, systems whose ownership should not be obvious should ensure usage of a banner that does not provide easy attribution.

STIG	Date
VMware vSphere ESXi 6.0 Security Technical Implementation Guide	2019-01-04

Details

Check Text ( C-63921r1_chk )
To verify the Banner setting, run the following command: # grep -i "^Banner" /etc/ssh/sshd_config If there is no output or the output is not exactly "Banner /etc/issue", this is a finding.

Fix Text (F-69105r1_fix)
To set the Banner setting, add or correct the following line in "/etc/ssh/sshd_config": Banner /etc/issue