Detections
Analytics

ESXI-06-000011 - The SSH daemon must be configured to use only the SSHv2 protocol.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SSH protocol version 1 suffers from design flaws that result in security vulnerabilities and should not be used.

 NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Only SSH protocol version 2 connections should be permitted.

Add or correct the following line in '/etc/ssh/sshd_config':

Protocol 2

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R4_STIG.zip

Item Details

References: CAT|I, CCI|CCI-000068, Group-ID|V-63191, Rule-ID|SV-77681r1_rule, STIG-ID|ESXI-06-000011

Plugin: VMware

Control ID: 9311972011d000f404e7ae4335d385bc29fddc98336a235a91822945c15a5893