Details

Disable the weak algorithm of the ssh to interact with the client through the strong algorithm in the ssh connection, and provide security protection for the ROSNG series products.

Solution

Disable the ssh weak algorithm:

ZXR10 (config)#ssh server encryption aes256-cbc disable

Supportive Information

The following resource is also helpful.

• https://support.zte.com.cn/support/doccenter/DocumentProductHandBookDetail.aspx?sid=102&id=30768582&type=docfeedback

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system ZTE_ROSNG.

References

• 800-53|SC-13.

Source

• Tenable.com/audits