topic Re: Backup Failure From Checkpoint GWs in General Topics

Backup Failure From Checkpoint GWs

LostBoY — Tue, 02 Mar 2021 12:52:40 GMT

I had regular sftp Backups configured for my R80.10 CP Gateways which were working as expecting.. due to a recent vulnerability remediation i changed the sshd_config file to disable weak ciphers. The Backups continued to work fine until after 1 week they stopped suddenly.

Now when i am trying to ssh backup server from CP CLI i am getting a message "no kex alg found" ..there seems to be no change at server end.

How can i rectify this ? is this something to do with sshd_config

i edited the sshd conf file to include the following

Ciphers aes128-ctr,aes192-ctr,aes256-ctr

MACs hmac-sha1

Re: Backup Failure From Checkpoint GWs

G_W_Albrecht — Tue, 02 Mar 2021 14:16:59 GMT

See sk150674: Unable to SSH from Check Point to Linux Open Platform server due to missing SSH algorithms for a possible reason.

Re: Backup Failure From Checkpoint GWs

G_W_Albrecht — Tue, 02 Mar 2021 14:40:22 GMT

Afaik Backups can be stored locally or remotely on a TFTP / SCP / FTP server - but SFTP ? And TFTP / SCP / FTP does not use SSH i think.

Re: Backup Failure From Checkpoint GWs

_Val_ — Tue, 02 Mar 2021 15:11:01 GMT

SCP actually uses SSHD