Skip to main content
ychia
Staff
Staff
June 13, 2022

Technical Tip: SSH Server Supports Weak Key Exchange Algorithms

  • June 13, 2022
  • 0 replies
  • 14704 views
Description

This article describes that the Vulnerability detected is still being detected after enabling strong-crypto.

Nessus scan result: SSH Server Supports Weak Key Exchange Algorithms (sash-weak-kex-algorithms).

Scope FortiGate 6.2 and higher.
Solution

Disable insecure key exchange algorithms 'diffie-hellman-group-exchange-sha1' running SSH service.


# config system global
    set ssh-kex-sha1 disable
end