Differences

This shows you the differences between two versions of the page.

--- paloaltonetworks:configuration:certificates [2021/02/17 08:55] – [Secure SSH Encryption on Management Interface] bstafford
+++ paloaltonetworks:configuration:certificates [2022/11/23 12:49] (current) – external edit 127.0.0.1
@@ Line 75: / Line 75: @@
 After setting the cipher suite, you will need to run the following command. Or, you can type ''exit'' and then run the above command without the 'run' at the start.
 <code>run set ssh service-restart mgmt</code>
+===== Test SSH NMAP =====
+<code>nmap --script ssh2-enum-algos -sV -p 22 10.1.1.1</code>
-===== Official SSH Secure =====
-From [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PN5bCAG|here]].
-<code>configure
-delete deviceconfig system ssh
-set deviceconfig system ssh ciphers mgmt aes256-ctr
-set deviceconfig system ssh ciphers mgmt aes256-gcm
-set deviceconfig system ssh default-hostkey mgmt key-type ECDSA 256
-set deviceconfig system ssh regenerate-hostkeys mgmt key-type ECDSA key-length 256
-set deviceconfig system ssh session-rekey mgmt interval 3600
-set deviceconfig system ssh mac mgmt hmac-sha2-256
-set deviceconfig system ssh mac mgmt hmac-sha2-512</code>
-<code>commit</code>
-<code>set ssh service-restart mgmt</code>
 ===== Self-Signed Elliptic Curve Certificates =====