Hi Cisco Team,
We have Cisco IPS configured for SSH access, during the security audit following issues were reported:
1. The SSH server is configured to support Cipher Block Chaining (CBC) encryption.
2. The SSH server is configured to allow either MD5 or 96-bit MAC algorithms, both of which are considered weak.
I could not find any documentation to close the audit finding on IPS, we are running IPS version 7.1(11)E4. Request your advice.
Thanks
