Skip to main content
ychia
Staff
Staff
June 13, 2022

Technical Tip: SSH Server Supports Weak Key Exchange Algorithms

  • June 13, 2022
  • 0 replies
  • 14695 views
Description

This article describes that the Vulnerability detected is still being detected after enabling strong-crypto.

Nessus scan result: SSH Server Supports Weak Key Exchange Algorithms (sash-weak-kex-algorithms).

Scope FortiGate 6.2 and higher.
Solution

Disable insecure key exchange algorithms 'diffie-hellman-group-exchange-sha1' running SSH service.


# config system global
    set ssh-kex-sha1 disable
end

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!