topic Re: Weak SSH ciphers SMB in Spark Firewall (SMB)

Weak SSH ciphers SMB

RS_Daniel — Mon, 25 Apr 2022 22:57:59 GMT

Hello CheckMates,

According to sk162794 and sk171332, it is not possible to disable weak ciphers for SSH in Gaia Embedded appliances. As recommended on the first sk, we have already submitted an RFE. However customer asks if it is planned to have this feature in the neat future for SMB gateways. Just wanted to see if someone in the community may have information about this. Thanks in advance.

Regards

Re: Weak SSH ciphers SMB

RS_Daniel — Mon, 25 Apr 2022 23:00:24 GMT

I missed to put this on SMB section, sorry, can some admin help with this? Thanks!

Re: Weak SSH ciphers SMB

PhoneBoy — Tue, 26 Apr 2022 03:53:20 GMT

Done.

The issue is that the SSH server used on the SMB appliances doesn't offer much in the way of configuration.
It's possible it will get an upgrade as part of the R81.x firmware.

Re: Weak SSH ciphers SMB

G_W_Albrecht — Fri, 29 Apr 2022 07:58:18 GMT

There is a feature mentioned as still in development for R81.10.00 called

New utility tool to manage cipher suites

Re: Weak SSH ciphers SMB

RS_Daniel — Fri, 29 Apr 2022 16:01:42 GMT

Hello,

That sounds promising, hope it comes soon. I imagine just for new SMB lines 1500/1600/1800 rigth? or are 1400 also included?

Thanks!

Re: Weak SSH ciphers SMB

G_W_Albrecht — Sat, 30 Apr 2022 07:21:30 GMT

As 1400 could not install R80.20.40 it is for 15/16/18 + only...