Technical Tip: SSH Server Supports Weak Key Exchange Algorithms

[ychia]

Description	This article describes that the Vulnerability detected is still being detected after enabling strong-crypto. Nessus scan result: SSH Server Supports Weak Key Exchange Algorithms (sash-weak-kex-algorithms).
Scope	FortiGate 6.2 and higher.
Solution	Disable insecure key exchange algorithms 'diffie-hellman-group-exchange-sha1' running SSH service. # config system global     set ssh-kex-sha1 disable end