After scanning the nessus scanner, on the Catalyst 3560 and 3750 equipment, the vulnerability SSH Weak Key Exchange Algorithms Enabled was identified, however it was not found on the equipment how to resolve the problem, some attempts were made but were unsuccessful, here is what was done until now:
An attempt was made to include the options that the equipment provides, but without success:
ip http secure-ciphersuite ?
3des-ede-cbc-sha Encryption type ssl_rsa_with_3des_ede_cbc_sha ciphersuite
des-cbc-sha Encryption type ssl_rsa_with_des_cbc_sha ciphersuite
rc4-128-md5 Encryption type ssl_rsa_with_rc4_128_md5 ciphersuite
rc4-128-sha Encryption type ssl_rsa_with_rc4_128_sha ciphersuite
The following features have already been disabled:
no ip http server
no ip http secure-server
I am using the version WS-C3560V2-24PS 12.2(55)SE12 e WS-C3750V2-48PS-S 12.2(55)SE12.
