View the security misconfiguration catalog
  • Misconfiguration Name
  • SSH2 protocol is not used for SSH communications
  • Description
  • SSH (Secure Shell) protocol allows you to connect to a remote Linux system securely using a variety of SSH clients. SSH1 was the original protocol and was subject to security issues. SSH2 is more advanced and secure. Fixing this misconfiguration will ensure only SSH2 is used for all SSH communications.
  • Severity
  • critical
  • Category
  • Linux Secure Shell
  • Resolution
  • Follow the below steps to resolve the misconfiguration. Edit the /etc/ssh/sshd_config file to set the parameter as follows:
    Protocol 2
  • Potential issues that may arise after applying the resolution
  • Altering the existing security setting may create the following impact in your network operations.
  • Does remediation require reboot?
  • No