Other Articles

Servers – Configure SSH Warning Banner

Support > Fixing Checks > Server

06 March, 2026

This check ensures that a warning banner is configured for SSH connections on the server.

SSH banners display a security warning message before authentication. This helps inform users about system usage policies and can support legal enforcement against unauthorized access.

Check Details

  • Resource: Server
  • Check: Ensure SSH warning banner is configured
  • Risk: Without a warning banner, unauthorized users may not be explicitly informed about access restrictions, weakening legal protection and compliance posture.

Remediation Steps

  1. Open a terminal session with root or sudo privileges.

  2. Verify SSH banner configuration:

    sshd -T | grep banner

  3. Ensure output shows a configured banner file such as:

    Banner /etc/issue.net

  4. Edit SSH configuration file:

    sudo nano /etc/ssh/sshd_config

  5. Add or modify the Banner parameter:

    Banner /etc/issue.net

  6. Create or edit the banner file with a warning message:

    sudo nano /etc/issue.net

  7. Add an appropriate warning message, for example:

    Authorized access only. All activities may be monitored and reported.
  8. Save the file and exit.

  9. Restart SSH service:

    sudo systemctl restart sshd
  10. Re-run the audit command to confirm the banner is correctly configured.
  11. Ensure the banner message complies with your organization’s security policy.