Configuring CLI Banners in NSM Overview

You can customize the message that appears when a device administrator logs on to the security device using a console connection, Telnet, or SSH. This message, called a banner, provides confirmation to device administrators to let them know that they have successfully logged in. Banners are optional; you are not required to configure CLI banners for the security device.

A default banner already exists for Telnet and SSH, but you can write a new message to suit your needs. You can use one banner for console connection and a different banner for both Telnet and SSH connections.

To configure CLI banners:

For ScreenOS 5.1 and later devices, you can also configure a secondary banner for console, Telnet, or SSH connections. The secondary banner enables you to create a much longer message that appears for any successful CLI-based connection attempt. By default, the secondary banner is blank (no secondary message is provided for device administrators upon login).

In ScreenOS 6.1 , for sessions created through ssh, telnet, or local console, the secondary banner gets displayed after the username and the password prompt. These actions can request the administrator to acknowledge the secondary banner through the CLI console. Hence, if the user does not acknowledge the secondary banner, the device login process fails and the connection is closed.

Related Documentation