https://community.cisco.com/t5/network-security/ssh-server-cbc-mode-ciphers-ssh-weak-mac-vulnerabilities/m-p/3077123#M43071 <P>I have a Firesight Management Server (2000) that manages various Firepower devices on my network. They are running the latest software versions.</P> <P></P> <P>My security auditor keeps flagging both the management server and the sensors for:</P> <P></P> <P>SSH Weak Algorithms enabled (MD5 &amp; 96bit)</P> <P>SSL 64bit block size ciphers (SWEET32 attack)</P> <P></P> <P>Is there any way to correct this through disabling certain ciphers, making modifications, etc.?</P> <P></P> <P>I do NOT want to lock myself out of my IPS system or damage the software.</P> <P></P> <P>thanks</P> <P></P> <P></P> Sun, 10 Mar 2019 13:47:16 GMT Colin Higgins 2019-03-10T13:47:16Z https://community.cisco.com/t5/network-security/ssh-server-cbc-mode-ciphers-ssh-weak-mac-vulnerabilities/m-p/3077123#M43071 <P>I have a Firesight Management Server (2000) that manages various Firepower devices on my network. They are running the latest software versions.</P> <P></P> <P>My security auditor keeps flagging both the management server and the sensors for:</P> <P></P> <P>SSH Weak Algorithms enabled (MD5 &amp; 96bit)</P> <P>SSL 64bit block size ciphers (SWEET32 attack)</P> <P></P> <P>Is there any way to correct this through disabling certain ciphers, making modifications, etc.?</P> <P></P> <P>I do NOT want to lock myself out of my IPS system or damage the software.</P> <P></P> <P>thanks</P> <P></P> <P></P> Sun, 10 Mar 2019 13:47:16 GMT https://community.cisco.com/t5/network-security/ssh-server-cbc-mode-ciphers-ssh-weak-mac-vulnerabilities/m-p/3077123#M43071 Colin Higgins 2019-03-10T13:47:16Z