Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The SSH daemon must be configured to use only the SSHv2 protocol.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-63191 | ESXI-06-000011 | SV-77681r1_rule | High |
| Description |
|---|
| SSH protocol version 1 suffers from design flaws that result in security vulnerabilities and should not be used. |
| STIG | Date |
|---|---|
| VMware vSphere ESXi 6.0 Security Technical Implementation Guide | 2019-01-04 |
Details
| Check Text ( C-63925r1_chk ) |
|---|
| To verify which SSH protocol version is configured, run the following command: # grep -i "^Protocol" /etc/ssh/sshd_config If there is no output or the output is not exactly "Protocol 2", this is a finding. |
| Fix Text (F-69109r1_fix) |
|---|
| Only SSH protocol version 2 connections should be permitted. Add or correct the following line in "/etc/ssh/sshd_config": Protocol 2 |