Forum Discussion

Steve_E_182861's avatar
Steve_E_182861
Icon for Nimbostratus rankNimbostratus
Apr 09, 2018

BIG-IQ UI advisory banner

There are articles on how to add an advisory banner for ssh login in BIG-IQ, but is there a method to configure an advisory banner for the BIG-IQ UI? I am running BIG-IQ 5.4.

 

5 Replies

  • It is not supported on 6.0.1 as well. Even thought I have enabled "sys db ui.advisory"

     

  • SEales's avatar
    SEales
    Icon for Nimbostratus rankNimbostratus

    The sys db ui.advisory is not a UI login advisory banner even on the BIG-IP. The ui.advisory banner banner gets displayed after login and is shown as a colored bar on the top and bottom of the UI page. You do not have to use the CLI to configure that parameter on the BIG-IP. From the Main tab, navigate to System >> Preferences. Select Advanced in the Security Settings section. At the bottom of that section is the settings for this Advisory Banner. You can select color of the bar and customize your text. Most corporate security teams mandate a legal advisory text to show up prior to logging into any device. That is what is not available and should be in BIG-IQ. It is available on the BIG-IP's.

     

  • SEales's avatar
    SEales
    Icon for Nimbostratus rankNimbostratus

    For the UI, it is supported in 6.1.0.

    1. From the UI, just go to System > THIS DEVICE > General Properties.
    2. In the top right, select Edit. You will be able to add a Custom Login Message in the appropriate section.

     

    For the CLI, follow this procedure:

     

    CLI Custom Message

    1. Login to BIG-IQ command line using root credentials.
    2. Use a text editor such as vi, open /config/ssh/ssh_banner file.
    3. Either paste in the approved banner or manually type in the banner.
    4. Save the file and exit the text editor.
    5. Add the sshd-banner by typing in the following command: tmsh modify sys sshd include "Banner /config/ssh/ssh_banner"
    6. Save the changes:   tmsh save sys config

     

    Should the banner ever need to be disabled, use the following procedure.

    1. Login to BIG-IQ command line using root credentials
    2. Disable the message banner with the following command:   tmsh modify sys sshd include none
    3. Save the changes:   tmsh save sys config