topic Re: Unable to ssh the FTD device in Network Security

Unable to ssh the FTD device

suryaaa — Mon, 27 Oct 2025 10:02:03 GMT

Dear Team,

I unable to ssh the FTD device. No External authentication is configured. Local authentication enable.

When ssh the device user name & password asking. After giving proper credentials access denied. But on same credentials we able to login the ftd device locally.

Also able to ping ftd device. Please help.

Re: Unable to ssh the FTD device

Marvin Rhoads — Mon, 27 Oct 2025 15:01:39 GMT

ssh access must use the admin username / account for local authentication method.

Re: Unable to ssh the FTD device

mosesreza98 — Mon, 27 Oct 2025 15:50:39 GMT

Likely AAA/SSH config: set aaa authentication ssh console LOCAL, ensure SSH is enabled on the correct interface and your source IP is allowed. Confirm the local user is privilege 15, then bounce SSH (no ssh → ssh) or run debug aaa authentication to see why it’s denied.

Re: Unable to ssh the FTD device

Marvin Rhoads — Mon, 27 Oct 2025 15:56:08 GMT

@mosesreza98 the poster is asking about FTD. ASA instructions are not applicable.

Re: Unable to ssh the FTD device

suryaaa — Mon, 27 Oct 2025 20:19:35 GMT

I already used admin user name. But stiill acess denied. Tell anything need to check

Re: Unable to ssh the FTD device

Marvin Rhoads — Tue, 28 Oct 2025 02:44:17 GMT

What model and version is your FTD? What do you mean by "same credentials we able to login the ftd device locally."? Console login or something else? Is the device managed with FDM or FMC?

Re: Unable to ssh the FTD device

suryaaa — Wed, 29 Oct 2025 06:32:30 GMT

FTD version 7.2.0 I am using. Locally login means console & device managed by FMC. Please tell if anything required.

Re: Unable to ssh the FTD device

suryaaa — Thu, 30 Oct 2025 10:25:47 GMT

Waiting for solution & suggestions. Please help

Re: Unable to ssh the FTD device

Marvin Rhoads — Thu, 30 Oct 2025 14:27:33 GMT

The only other thing I can think of would be the presence of an ssh access-list. But if that were present then you would not be prompted for username and password.

One other much less likely problem is the possibility of some other device with a conflicting IP address. It could be what is prompting you to login. You would be able to check that by looking at the ARP entries and MAC address table of the switch that your FTD management interface connects to.

If that all looks OK, then I would suggest opening a TAC case for hands-on troubleshooting