topic Re: SSH Cipher, SSH Hmac Version in Firewall and Security Management

SSH Cipher, SSH Hmac Version

d02a5074-1944-4 — Tue, 09 Jul 2019 02:55:50 GMT

Anyone can provide me the step of SSH Server Cipher and Hmac Version to change.

Thanks

Win

SSH Cipher, SSH Hmac Version

G_W_Albrecht — Tue, 09 Jul 2019 11:48:36 GMT

Honestly - no comprendo señor, can you please detail what you want to achieve ?

Re: SSH Cipher, SSH Hmac Version

Roman_Niewiado1 — Tue, 09 Jul 2019 12:43:59 GMT

To change SSH Ciphers you have to edit this file:

etc/ssh/sshd_config

regards

Roman

Re: SSH Cipher, SSH Hmac Version

d02a5074-1944-4 — Tue, 09 Jul 2019 15:47:26 GMT

Hi Roman_Niewiad01

Meaning we need to access with winscp and edit sshd_config file? How about cipher hmac file?

Re: SSH Cipher, SSH Hmac Version

d02a5074-1944-4 — Tue, 09 Jul 2019 15:51:44 GMT

Hi G_W_Albrecht,

I mean, I want to change ssh cipher to strong encryption example ( ciphers aes256-cbc) and also hmac want to do the same

Thanks,

Win

Re: SSH Cipher, SSH Hmac Version

Maik — Wed, 10 Jul 2019 07:47:53 GMT

Take a look at this thread.

It should explain the process to you 😉

Re: SSH Cipher, SSH Hmac Version

d02a5074-1944-4 — Wed, 17 Jul 2019 01:19:55 GMT

Hi Roman

I see brother. I found this on the checkpoint.

# Protocol 2,1
# Cipher 3des
# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc

Cipher aes256-ctr

Are we able to change this? How about for Cipher 3des can change to higher version?

Best Regards,

Win

Re: SSH Cipher, SSH Hmac Version

Roman_Niewiado1 — Wed, 17 Jul 2019 08:52:14 GMT

The last two lines in this files are the settings for the encryption.
If you are using R77.30 it could be, that the sshd is to old and the new settings don`t take affect.

Re: SSH Cipher, SSH Hmac Version

d02a5074-1944-4 — Wed, 17 Jul 2019 10:32:23 GMT

Hi Roman,

Nope we are using R80.10

Re: SSH Cipher, SSH Hmac Version

Bryce_Myers — Thu, 18 Jul 2019 15:01:16 GMT

You just need to modify the lines in /etc/ssh/ssh_config and /etc/ssh/sshd_config and restart sshd to take effect.

Re: SSH Cipher, SSH Hmac Version

Bryce_Myers — Thu, 18 Jul 2019 15:04:04 GMT

In my /etc/ssh/sshd_config:
Ciphers aes256-ctr,aes128-ctr,aes192-ctr
MACs hmac-sha1

This will force other machines connecting via ssh to use those Cipers and MACs