STIGQter: STIG Summary: Forescout Network Device Management Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

Forescout must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

DISA Rule

SV-230934r615887_rule

Vulnerability Number

V-230934

Group Title

SRG-APP-000068-NDM-000215

Rule Version

FORE-NM-000050

Severity

CAT III

CCI(s)

• CCI-000048 - The information system displays an organization-defined system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Weight

10

Fix Recommendation

Log on to the Forescout Administrator UI.

1. Select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
2. Select the "Login" tab and check the "Display this Notice and Consent Message after login" option.
3. Select the "Before login, prompt user to accept these Terms and Conditions".
4. Copy the exact text and formatting for the Standard Mandatory DoD and Consent Banner into the white box. Be sure to adhere to the exact line spacing required by DTM-08-060.

Check Contents

1. Log on to the Forescout Administrator UI.
2. Select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
3. Select the Login tab and check the "Display this Notice and Consent Message after login" option.
4. Select the "Before login, prompt user to accept these Terms and Conditions" and view the text.

If the banner is not present or not in exact compliance with the current verbiage and spacing in DTM-08-060, this is a finding.

Vulnerability Number

V-230934

Documentable

False

Rule Version

FORE-NM-000050

Severity Override Guidance

1. Log on to the Forescout Administrator UI.
2. Select Tools >> Options >> CounterACT User Profiles >> Password and Sessions.
3. Select the Login tab and check the "Display this Notice and Consent Message after login" option.
4. Select the "Before login, prompt user to accept these Terms and Conditions" and view the text.

If the banner is not present or not in exact compliance with the current verbiage and spacing in DTM-08-060, this is a finding.

Check Content Reference

M

Target Key

5245

Comments