topic Re: Update SSH client on Checkpoint in General Topics

Update SSH client on Checkpoint

John_Colfer — Fri, 17 May 2019 12:54:00 GMT

Hi Folks

I put a cisco switch into an environment and enabled sshV2 on the switch. We have ssh access to the firewall, so my idea was SSH to the firewall and then ssh from the firewall to the switch. However when I try this I get the below error:

"no kex alg"

I did some googling and found that this is usually due to an out of date ssh client and that the client should be updated.

Is there any way to update the SSH client on Checkpoint or is there a workaround for this issue?

Thanks in advance

John

Re: Update SSH client on Checkpoint

Danny — Fri, 17 May 2019 13:17:47 GMT

You should ask Check Point TAC if they can provide you with an updated version in order to keep your firewall environment in supported state.

Re: Update SSH client on Checkpoint

PhoneBoy — Sat, 18 May 2019 01:35:25 GMT

Not familiar with an updated SSH client for our appliances.
Third party clients and upgrades that didn't come from us are definitely not supported.

Re: Update SSH client on Checkpoint

Chris_Atkinson — Sat, 18 May 2019 12:48:47 GMT

I wouldn't typically recommend utilising the firewall as your bastion / jump host but there are other use cases that might benefit if an update is needed.

To request feature enhancements please go here: https://rfe.checkpoint.com/rfe/rfe.htm

Re: Update SSH client on Checkpoint

JozkoMrkvicka — Sun, 19 May 2019 09:53:15 GMT

We are using Check Point as jumpserver, but only to connect to other Check Point firewalls, no other vendors are involved.

Re: Update SSH client on Checkpoint

John_Colfer — Mon, 20 May 2019 08:23:24 GMT

Thanks Guys

I'll request a feature update.