Cisco Cisco Email Security Appliance C160 Referencia técnica
A D M I N A C C E S S C O N F I G
C H A P T E R 3 : T H E C O M M A N D S : R E F E R E N C E E X A M P L E S
63
Example - Configuring Network Access List
You can configure the Email Security appliance to display a message called a “login banner”
when a user attempts to log into the appliance through SSH, Telnet, FTP, or Web UI. The login
banner is customizable text that appears above the login prompt in the CLI and to the right of
the login prompt in the GUI. You can use the login banner to display internal security
information or best practice instructions for the appliance. For example, you can create a
simple note that saying that unauthorized use of the appliance is prohibited or a detailed
warning concerning the organization’s right to review changes made by the user to the
appliance.
when a user attempts to log into the appliance through SSH, Telnet, FTP, or Web UI. The login
banner is customizable text that appears above the login prompt in the CLI and to the right of
the login prompt in the GUI. You can use the login banner to display internal security
information or best practice instructions for the appliance. For example, you can create a
simple note that saying that unauthorized use of the appliance is prohibited or a detailed
warning concerning the organization’s right to review changes made by the user to the
appliance.
The maximum length of the login banner is 2000 characters to fit 80x25 consoles. A login
banner can be imported from a file in the
banner can be imported from a file in the
/data/pub/configuration
directory on the
appliance. After creating the banner, commit your changes.
In the following example, the login banner “Use of this system in an unauthorized manner is
prohibited” is added to the appliance:
prohibited” is added to the appliance:
Choose the operation you want to perform:
- NEW - Add a new IP address/subnet/range.
- EDIT - Modify an existing entry.
- DELETE - Remove an existing entry.
- CLEAR - Remove all the entries.
[]>
Current mode: Restrict.
Please select the mode:
- ALL - All IP addresses will be allowed to access the administrative
interface.
- RESTRICT - Specify IP addresses/Subnets/Ranges to be allowed access.
[]>
Code Example 3-32 adminaccessconfig - Banner List
Choose the operation you want to perform:
- BANNER - Configure login message(banner) for appliance administrator login.
- IPACCESS - Configure IP-based access for appliance administrative interface.
[]> banner
A banner has not been defined.
Choose the operation you want to perform:
- NEW - Create a banner to display at login.
- IMPORT - Import banner text from a file.
[]> new
Enter or paste the banner text here. Enter CTRL-D on a blank line to end.
Use of this system in an unauthorized manner is prohibited.
Code Example 3-31 adminaccessconfig - Network Access List