topic Re: How to capture Login Banner details in FTD CLI in Network Security

How to capture Login Banner details in FTD CLI

hkchoudhary — Fri, 21 Feb 2020 17:44:37 GMT

I have a requirement of capturing the login banner details which is one of the requirements of the baseline compliance i am working on. I configured a custom pre-login banner from FMC GUI successfully and I am able to see the custom banner but if I try to look for the banner configuration in FTD CLI by running commands like "show running-config banner login", "show banner login", "show running-config | grep banner" but I cannot find the banner details in FTD CLI, any idea around it how to capture this information via command line?

Re: How to capture Login Banner details in FTD CLI

nspasov — Thu, 05 Dec 2019 07:30:26 GMT

What hardware model are you using? In the new Firepower appliances, the banners are stored and managed in FXOS. For instance, if you are running Firepower 1K/2K, you can obtain the banner by:

Connecting to the console port (Or ssh to the device and then issue "connect fxos") > Scope security > Scope banner > show pre-login-banner

I hope this helps!

Thank you for rating helpful posts!

Re: How to capture Login Banner details in FTD CLI

hkchoudhary — Thu, 05 Dec 2019 08:34:06 GMT

Hi @nspasov,

Thank you for the quick response. I have an ASA Series device so I am unable to run connect command from FTD CLI. Below are the details for my VM :
Model: Cisco Firepower Threat Defense for VMWare (75) Version 6.2.3 (Build 20)

Cisco Adaptive Security Appliance Software Version 9.9(1)52
Firepower Extensible Operating System Version 2.3(1.54)

Hardware: ASAv, 8192 MB RAM, CPU Xeon E5 series 2197 MHz, 1 CPU (4 cores)
Model Id: ASAv30
Any advice on how to capture the banner details from the FTD CLI in this case?

Re: How to capture Login Banner details in FTD CLI

nspasov — Thu, 05 Dec 2019 17:33:07 GMT

Hmm, sorry but I don't have an ASA appliance to test this with...perhaps someone else can chime in here...

Thank you for rating helpful posts!

Re: How to capture Login Banner details in FTD CLI

vishnu kanakaraj — Wed, 25 Mar 2020 19:05:48 GMT

Thank you!

Can you also share the steps to configure Login Banner message in FTD CLI.

Re: How to capture Login Banner details in FTD CLI

Marvin Rhoads — Thu, 26 Mar 2020 08:05:26 GMT

What are you running exactly? If it's a VM, it must be either an ASAv or an FTDv.

Re: How to capture Login Banner details in FTD CLI

garrycorker — Wed, 22 Jul 2020 18:47:52 GMT

I am using the Cisco FTD for VMWare (75) Version 6.3.0.6 (Build 34)

I need to put in a pre-login banner and cannot seem to figure out the configuration steps.

I have the option of "show banner" but not the option to configure banner. Can you help with this? This is a requirement for a customer using the product.

Thank you

Re: How to capture Login Banner details in FTD CLI

Marvin Rhoads — Thu, 23 Jul 2020 05:17:39 GMT

The option for a login banner on FTD is set in the managing FMC as a platform setting. See the following example:

If you're using Firepower Device Manager I don't believe there's an option to set a banner (as of Firepower 6.6).

Re: How to capture Login Banner details in FTD CLI

jwc4521 — Mon, 23 Nov 2020 21:04:58 GMT

after i ssh into the device, i connect to fxos (ver 2.8) via cli
I enter the following commands: scope security > security# scope banner > banner# scope post-login-banner > create post-login-banner*# > set message
i receive prompt to enter post-login-banner and once finished enter ENDOFBUF
i exit back out to prompt fxos# and enter commit-buffer and receive the following error
error: Changes not allowed. use: 'connect ftd' to make changes.
i enter connect ftd to change to this OS; however, there is no option to commit-buffer.

am i missing something? thanks for the assist!

Re: How to capture Login Banner details in FTD CLI

jwc4521 — Mon, 23 Nov 2020 21:08:43 GMT

hi. i had the same issue described above. I am using a FPR-2100 series (2120)...

"after i ssh into the device, i connect to fxos (ver 2.8) via cli
I enter the following commands: scope security > secuirty# scope banner > banner# scope post-login-banner > create post-login-banner*# > set message
i receive prompt to enter post-login-banner and once finished enter ENDOFBUF
i exit back out to promot fxos# and enter commit-buffer and receive the following error
error: Changes not allowed. use: 'connect ftd' to make changes.
i enter connect ftd to change to this OS; however, there is no option to commit-buffer.

am i missing something? thanks for the assist!"

Re: How to capture Login Banner details in FTD CLI

garrycorker — Tue, 24 Nov 2020 14:20:28 GMT

My device did not support the banner option. Even though it would allow me to enter the information, it would not display. This is a known issue with my virtual device. I contacted CISTAC and there was nothing I could to.

Re: How to capture Login Banner details in FTD CLI

sumanvilla7 — Fri, 02 Jan 2026 09:55:59 GMT

I also facing this issue, how to resolve.

Re: How to capture Login Banner details in FTD CLI

Marvin Rhoads — Fri, 02 Jan 2026 12:27:39 GMT

@sumanvilla7 you are replying to a 5 year old thread. Please create a new topic with the details of your issue, including the model .software version and management platform.