1.6.2 Ensure 'SSH version 2' is enabled

Information

Sets the SSH version to 2

Rationale:

SSH is an application running on top of a reliable transport layer, such as TCP/IP, that provides strong authentication and encryption capabilities. The ASA allows SSH connections to the ASA for management purposes. The ASA supports the SSH remote shell functionality provided in SSH Versions 1 and 2. However, SSH version is known to be a vulnerable protocol that can be exploited by attackers.

Solution

Run the following to enable SSH version 2

hostname(config)# ssh version 2

Default Value:

By default, the security appliance allows both SSH Version 1 and Version 2

See Also

https://workbench.cisecurity.org/files/3246

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-3, CSCv6|9.1, CSCv7|11.6

Plugin: Cisco

Control ID: fecdb1a6f11111d6f1eb6cc131c47aa22f136c43b8164cdd33707e16b0b551e0