SSH Server Supports Weak Key Exchange Algorithms

[Umesh]

Hi Team,

1. How can we check SSH Server Supports Weak Key Exchange Algorithms is enabled in the Fortigate Firewall

 and what are the command in order to check it.

2. how to disable it If SSH Server Supports Weak Key Exchange Algorithms.

Thank you.

Umesh

[kcheng]

Hi @Umesh 

In order to check the respective, please refer to the following document:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-Server-Supports-Weak-Key-Exchange-Algo...

You should consider hardening your FortiGate to ensure stronger and secure encryption:

https://docs.fortinet.com/document/fortigate/6.0.0/hardening-your-fortigate/344487/global-commands-f...

[Umesh]

Hi,

Config sys globle

set ssh-kex-algo diffie-hellman-group-exchange-sha256

Is above command is strong for SSH Server Supports Weak Key Exchange Algorithms