STIGhub
STIGs
RMF Controls
Compare
← AC-8 — System Use Notification
CCI-001388
Definition
For publicly accessible systems, includes a description of the authorized uses of the system.
Parent Control
AC-8
System Use Notification
Access Control
Linked STIG Checks (101)
V-274066
CAT II
Amazon Linux 2023 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.
Amazon Linux 2023 Security Technical Implementation Guide
V-268084
CAT II
NixOS must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Anduril NixOS Security Technical Implementation Guide
V-252451
CAT II
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DoD Notice and Consent Banner before granting GUI access to the system.
Apple macOS 12 (Monterey) Security Technical Implementation Guide
V-257157
CAT II
The macOS system must be configured so that any connection to the system must display the Standard Mandatory DOD Notice and Consent Banner before granting GUI access to the system.
Apple macOS 13 (Ventura) Security Technical Implementation Guide
V-268431
CAT II
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.
Apple macOS 15 (Sequoia) Security Technical Implementation Guide
V-277039
CAT II
The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.
Apple macOS 26 (Tahoe) Security Technical Implementation Guide
V-204921
CAT II
The ALG providing user access control intermediary services for publicly accessible applications must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
Application Layer Gateway Security Requirements Guide
V-222436
CAT III
The publicly accessible application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
Application Security and Development Security Technical Implementation Guide
V-272630
CAT II
CylanceON-PREM must be configured to show the standard mandatory DOD Notice and Consent Banner before granting access to CylanceON-PREM.
Arctic Wolf CylanceON-PREM Security Technical Implementation Guide
V-276006
CAT II
Ax-OS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to Ax-OS.
Axonius Federal Systems Ax-OS Security Technical Implementation Guide
V-276007
CAT II
Ax-OS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the Toolbox.
Axonius Federal Systems Ax-OS Security Technical Implementation Guide
V-237347
CAT II
The CA API Gateway providing user access control intermediary services for publicly accessible applications must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
CA API Gateway ALG Security Technical Implementation Guide
V-219170
CAT II
The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any publically accessible connection to the system.
Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide
V-238214
CAT II
The Ubuntu operating system must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide
V-260525
CAT II
Ubuntu 22.04 LTS must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide
V-270691
CAT II
Ubuntu 24.04 LTS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to via an SSH logon.
Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide
V-269156
CAT II
AlmaLinux OS 9 must prevent users from disabling the Standard Mandatory DOD Notice and Consent Banner for graphical user interfaces.
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V-269157
CAT II
AlmaLinux OS 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V-269158
CAT II
AlmaLinux OS 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V-269159
CAT II
AlmaLinux OS 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via an SSH user logon.
Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide
V-270917
CAT II
The publicly accessible Dragos Platform application must display the Standard Mandatory DOD Notice and Consent Banner before granting access to Dragos Platform.
Dragos Platform 2.x Security Technical Implementation Guide
V-215717
CAT III
The BIG-IP APM module must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.
F5 BIG-IP Access Policy Manager Security Technical Implementation Guide
V-215743
CAT III
The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.
F5 BIG-IP Local Traffic Manager Security Technical Implementation Guide
V-266145
CAT II
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to the network.
F5 BIG-IP TMOS ALG Security Technical Implementation Guide
V-278384
CAT II
NGINX must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.
F5 NGINX Security Technical Implementation Guide
V-237574
CAT II
CounterACT, when providing user access control intermediary services for publicly accessible applications, must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
ForeScout CounterACT ALG Security Technical Implementation Guide
V-203665
CAT II
Any publically accessible connection to the operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
General Purpose Operating System Security Requirements Guide
V-255237
CAT II
Any publicly accessible connection to SSMC must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
HPE 3PAR SSMC Operating System Security Technical Implementation Guide
V-237829
CAT III
The Standard Mandatory DoD Notice and Consent Banner must be displayed until users acknowledge the usage conditions and take explicit actions to log on for further access.
HPE 3PAR StoreServ 3.2.x Security Technical Implementation Guide
V-255281
CAT II
The HPE 3PAR OS must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system.
HPE 3PAR StoreServ 3.3.x Security Technical Implementation Guide
V-266989
CAT II
The Remote Access VPN Gateway and/or client must display the Standard Mandatory DOD Notice and Consent Banner before granting remote access to the network.
HPE Aruba Networking AOS VPN Security Technical Implementation Guide
V-215203
CAT II
Any publically accessible connection to AIX operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
IBM AIX 7.x Security Technical Implementation Guide
V-252578
CAT III
IBM Aspera Faspex must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
IBM Aspera Platform 4.2 Security Technical Implementation Guide
V-252598
CAT III
IBM Aspera Shares must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
IBM Aspera Platform 4.2 Security Technical Implementation Guide
V-65199
CAT II
The DataPower Gateway providing user access control intermediary services for publicly accessible applications must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
IBM DataPower ALG Security Technical Implementation Guide
V-223522
CAT II
IBM z/OS FTP.DATA configuration statements for the FTP Server must specify the BANNER statement.
IBM z/OS ACF2 Security Technical Implementation Guide
V-223587
CAT II
IBM z/OS SSH daemon must be configured with the Department of Defense (DoD) logon banner.
IBM z/OS ACF2 Security Technical Implementation Guide
V-223642
CAT II
IBM z/OS UNIX Telnet Server warning banner must be properly specified.
IBM z/OS ACF2 Security Technical Implementation Guide
V-223643
CAT II
IBM z/OS UNIX Telnet Server Startup parameters must be properly specified to display the banner.
IBM z/OS ACF2 Security Technical Implementation Guide
V-223737
CAT II
IBM z/OS FTP.DATA configuration statements for the FTP server must specify the BANNER statement.
IBM z/OS RACF Security Technical Implementation Guide
V-223809
CAT II
The SSH daemon must be configured with the Standard Mandatory DoD Notice and Consent Banner.
IBM z/OS RACF Security Technical Implementation Guide
V-223833
CAT II
The IBM z/OS warning banner for the TN3270 Telnet server must contain the proper content of the Standard Mandatory DoD Notice and Consent Banner.
IBM z/OS RACF Security Technical Implementation Guide
V-223868
CAT II
The IBM z/OS UNIX Telnet server warning banner must be properly specified.
IBM z/OS RACF Security Technical Implementation Guide
V-223973
CAT II
IBM z/OS FTP.DATA configuration statements must have a proper banner statement with the Standard Mandatory DOD Notice and Consent Banner.
IBM z/OS TSS Security Technical Implementation Guide
V-223982
CAT II
IBM z/OS FTP.DATA configuration statements for the FTP server must specify the Standard Mandatory DoD Notice and Consent Banner statement.
IBM z/OS TSS Security Technical Implementation Guide
V-224055
CAT II
The IBM z/OS SSH daemon must be configured with the Standard Mandatory DoD Notice and Consent Banner.
IBM z/OS TSS Security Technical Implementation Guide
V-224103
CAT II
The IBM z/OS UNIX Telnet server warning banner must be properly specified.
IBM z/OS TSS Security Technical Implementation Guide
V-237929
CAT II
The IBM z/VM TCP/IP must be configured to display the mandatory DoD Notice and Consent banner before granting access to the system.
IBM zVM Using CA VM:Secure Security Technical Implementation Guide
V-258584
CAT II
The ICS must display the Standard Mandatory DOD Notice and Consent Banner before granting access to users.
Ivanti Connect Secure VPN Security Technical Implementation Guide
V-270209
CAT II
Microsoft Entra ID must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.
Microsoft Entra ID Security Technical Implementation Guide
V-220921
CAT II
The required legal notice must be configured to display before console logon.
Microsoft Windows 10 Security Technical Implementation Guide
V-220922
CAT III
The Windows dialog box title for the legal banner must be configured.
Microsoft Windows 10 Security Technical Implementation Guide
V-253446
CAT III
The Windows message title for the legal notice must be configured.
Microsoft Windows 11 Security Technical Implementation Guide
V-225036
CAT II
The required legal notice must be configured to display before console logon.
Microsoft Windows Server 2016 Security Technical Implementation Guide
V-225037
CAT III
The Windows dialog box title for the legal banner must be configured with the appropriate text.
Microsoft Windows Server 2016 Security Technical Implementation Guide
V-205631
CAT II
Windows Server 2019 required legal notice must be configured to display before console logon.
Microsoft Windows Server 2019 Security Technical Implementation Guide
V-205632
CAT III
Windows Server 2019 title for legal banner dialog box must be configured with the appropriate text.
Microsoft Windows Server 2019 Security Technical Implementation Guide
V-254457
CAT II
Windows Server 2022 required legal notice must be configured to display before console logon.
Microsoft Windows Server 2022 Security Technical Implementation Guide
V-254458
CAT III
Windows Server 2022 title for legal banner dialog box must be configured with the appropriate text.
Microsoft Windows Server 2022 Security Technical Implementation Guide
V-278207
CAT II
The Windows Server 2025 required legal notice must be configured to display before console logon.
Microsoft Windows Server 2025 Security Technical Implementation Guide
V-278208
CAT III
Windows Server 2025 title for legal banner dialog box must be configured with the appropriate text.
Microsoft Windows Server 2025 Security Technical Implementation Guide
V-254133
CAT II
Any publicly accessible connection to Nutanix AOS must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
Nutanix AOS 5.20.x OS Security Technical Implementation Guide
V-273192
CAT II
Okta must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.
Okta Identity as a Service (IDaaS) Security Technical Implementation Guide
V-221654
CAT II
The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Oracle Linux 7 Security Technical Implementation Guide
V-248526
CAT II
OL 8 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via an SSH logon.
Oracle Linux 8 Security Technical Implementation Guide
V-248527
CAT II
OL 8 must display a banner before granting local or remote access to the system via a graphical user logon.
Oracle Linux 8 Security Technical Implementation Guide
V-248528
CAT II
OL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Oracle Linux 8 Security Technical Implementation Guide
V-248529
CAT II
OL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
Oracle Linux 8 Security Technical Implementation Guide
V-271455
CAT II
OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
Oracle Linux 9 Security Technical Implementation Guide
V-271487
CAT II
OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.
Oracle Linux 9 Security Technical Implementation Guide
V-271680
CAT II
OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.
Oracle Linux 9 Security Technical Implementation Guide
V-271688
CAT II
OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Oracle Linux 9 Security Technical Implementation Guide
V-281225
CAT II
RHEL 10 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user login.
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V-281226
CAT II
RHEL 10 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V-281227
CAT II
RHEL 10 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user login.
Red Hat Enterprise Linux 10 Security Technical Implementation Guide
V-204580
CAT II
The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts.
Red Hat Enterprise Linux 7 Security Technical Implementation Guide
V-257779
CAT II
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V-257981
CAT II
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V-258012
CAT II
RHEL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V-258013
CAT II
RHEL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.
Red Hat Enterprise Linux 9 Security Technical Implementation Guide
V-275619
CAT II
Ubuntu OS must display the Standard Mandatory DOD Notice and Consent Banner before granting any user connection to the OS.
Riverbed NetIM OS Security Technical Implementation Guide
V-254091
CAT II
The publicly accessible application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to Innoslate.
SPEC Innovations Innoslate 4.x Security Technical Implementation Guide
V-261265
CAT II
SLEM 5 must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.
SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide
V-217105
CAT II
The SUSE operating system must display a banner before granting local or remote access to the system via a graphical user logon.
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
V-217106
CAT II
The SUSE operating system must display the approved Standard Mandatory DoD Notice before granting local or remote access to the system via a graphical user logon.
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
V-217263
CAT II
The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access via SSH.
SUSE Linux Enterprise Server 12 Security Technical Implementation Guide
V-279175
CAT II
The Edge SWG must display the standard mandatory DOD-approved notice and consent banner before granting access to the network.
Symantec Edge SWG ALG Security Technical Implementation Guide
V-94237
CAT II
Symantec ProxySG providing user access control intermediary services for publicly accessible applications must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to the system.
Symantec ProxySG ALG Security Technical Implementation Guide
V-240998
CAT II
The publicly accessible Tanium application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
Tanium 7.0 Security Technical Implementation Guide
V-234058
CAT II
The publicly accessible Tanium application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
Tanium 7.3 Security Technical Implementation Guide
V-254895
CAT II
The publicly accessible Tanium application must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the application.
Tanium 7.x Application on TanOS Security Technical Implementation Guide
V-254855
CAT II
The publicly accessible Tanium Operating System (TanOS) must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the system.
Tanium 7.x Operating System on TanOS Security Technical Implementation Guide
V-253823
CAT II
The publicly accessible Tanium application must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the application.
Tanium 7.x Security Technical Implementation Guide
V-252923
CAT III
TOSS must display the Standard Mandatory DoD Notice and Consent Banner or equivalent US Government Agency Notice and Consent Banner before granting local or remote access to the system via a ssh logon.
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide
V-282366
CAT II
TOSS 5 must display the Standard Mandatory DOD or other applicable U.S. Government Notice and Consent Banner before granting local or remote access to the system via a command line user login.
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
V-282367
CAT II
TOSS 5 must display the Standard Mandatory DOD or other applicable U.S. Government agency Notice and Consent Banner before granting local or remote access to the system via a SSH login.
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
V-282368
CAT II
TOSS 5 must display the Standard Mandatory DOD or other applicable U.S. Government agency Notice and Consent Banner before granting local or remote access to the system via a graphical user login.
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
V-282369
CAT II
TOSS 5 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.
Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide
V-258526
CAT II
Any publically accessible connection to the SLES for vRealize must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide
V-258512
CAT II
Any publicly accessible connection to the SLES for vRealize must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide
V-207185
CAT II
The Remote Access VPN Gateway and/or client must display the Standard Mandatory DOD Notice and Consent Banner before granting remote access to the network.
Virtual Private Network (VPN) Security Requirements Guide