How to log SSH Version and exchanged Algorithms with SSH Inspection

[cpx]

Is it possible with FortiGate security profiles to log what SSH Version is used and which algorithms are negotiated on a ssh connection? For Https connections it's possible to see the TLS version with normal certificate inspection and additionally the exchanged algorithms and parameters when using Deep Inspection. But for SSH I did not figure out how to get the exchanged algorithms and SSH version.

I tried SSL/SSH inspection with DeepSSH inspection and a SSH-Filter profile with all possible logging enabled. For my test policy all traffic is logged. I also applied an application control profile with SSH monitored. All I see in my logfiles is that there is a connection - and with SSH Filter enabled e.g. which commands where issued.

[Shashwati]

Hello , please refer to the document

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-Server-host-key-offered-by-FortiGate/t...

[cpx]

Hello Shashwati, thank you for your reply. The document you linked outlines monitoring (with e.g. wireshark) the SSH-Algorithms used when connecting to a FortiGate, if I understand correctly.

My question was about monitoring the algorithms used by to two hosts communicating over SSH where the traffic traverses the FortiGate. I would like to get the algorithms from my logfiles for the policy used by this two hosts, if possible. Sorry, if my question was unclear.