cancel
Showing results for 
Search instead for 
Did you mean: 

Disable SSH1 Support

 
Highlighted
Syedfurquan
Trusted Contributor

Disable SSH1 Support

Hello Expert,

 

As per security audit we need to fix to issues as below. Appreciate any support on this:

 

1.  Disable SSH1 support. Do not enable SSH Version 1 Fallback since systems with upgraded versions of SSH and with Fallback Version 1 enabled are still vulnerable.

 

As per other post it suggests to " Use : Protocol 2 in /opt/ssh/etc/sshd_config". Hence after editing /opt/ssh/etc/sshd_config it looks like as:

#Port 22
Protocol 2
#AddressFamily any
#ListenAddress 0.0.0.0
#ListenAddress ::

 

is it ok now?

 

2.  Disable or remove SNMPv1/2c authentication. Use SNMP version 3

I found out "The HP-UX standard SNMP agent does not support SNMP version 3".  is it correct?

 

Regards,

Regards,
Syed
1 REPLY 1
Highlighted
RJHall
Frequent Advisor

Re: Disable SSH1 Support

'Protocol 2' is the default, so that should be fine.

 

This thread indicates SSNMPv3 is available via Internet Express. I have no idea whether HP monitoring software will work with SNMPv3.