BANNER_CHECK Check

This policy item checks if the config content matches the content provided by normalizing the values to use common newline, escaping patterns, and stripping white space from beginning and end of policy text.

Usage

<custom_item>

type: BANNER_CHECK

description: ["description"]

item: ["config item"]

content: ["banner content"]

(optional) is_substring: [YES|NO]

</custom_item>

Keywords

content

The content is what the expected banner should be. New lines in the banner are automatically processed through functions that determine delimiters and context.

is_substring

Use the is_substring flag to support placing location-specific information in a banner. If you set this flag to YES, the expected banner can be a substring of the config, and does not require a full match.

Examples

<custom_item>

type : BANNER_CHECK

description : "Banner incoming is configured"

item : "banner incoming"

content : "** No Unauthorized Access **"

</custom_item>

<custom_item>

type : BANNER_CHECK

description : "Banner login is configured"

item : "banner login"

content : "All access is monitored and recorded."

</custom_item>

<custom_item>

type : BANNER_CHECK

description : "Banner login is configured"

item : "banner login"

content : "access is monitored"

is_substring : YES

</custom_item>