This new feature , added in PAN-OS 7.1, adds the ability to force an administrator to accept the login banner before logging into the system. It also allows admins to add a logon message (MotD) and allows Palo Alto Networks to add messages (MotDs). In addition, it allows admins to add a customized banner at the top and bottom of every WebUI page.
Content
Messages (MotDs) can be embedded into dynamic content updates
PAN-OS
Messages (MotDs) can be into embedded into each software release explaining new features or any other important messages
Available in both feature releases and maintenance releases
Includes PAN-OS for all platforms running PAN-OS 7.1, including WF-500
Login Banner
Adds ability to force an admin to acknowledge a checkbox on the login screen before logging in
Configured under Device/Panorama > Setup > Management > General Settings
When the option to force admins to acknowledge the login banner is configured, the WebUI and CLI will change accordingly before allowing successful authentication. The Login button on the WebUI will remain grayed out until the user checks the box to confirm the message has been acknowledged:
ssh admin@10.192.16.241 Login Banner Msg here ! Do you accept and acknowledge the statement above ? (yes/no) :
Banners and Messages have a customizable background color
The color choice will be the same used for tags
For the banners, the none option means explicit white background
The foreground color uses the same algorithm used for tag text
The top and bottom banners are customizable separately
The same message can be displayed on top and bottom
The “Same banner for header and footer” option is enabled by default
Banners and Messages can be configured under Device > Setup > Management > Banners and Messages:
Panorama
Messages of the Day and Banners can be configured on Panorama, as well as be pushed to managed devices from Panorama
Configured using Templates or Template Stacks
Note: Banners do not require a commit to take effect.