Edit and configure the SSL Certificate and SSH Server on Cisco SMA.

[thaungtunzaw]

Hello,

I would like to know how to edit and configure the SSL Certificate and SSH Server on Cisco SMA.

SSH Server on Cisco SMA

1. how to disable CBC mode cipher encryption, and enable CTR or GCM cipher mode encryption.

2. how to disable MD5 and 96-bit MAC algorithms

3. how to remove the weak ciphers

Thanks.

[Libin Varghese]

You can review and modify the ciphers in use through the CLI using command sslconfig.

Refer to the article:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117855-technote-esa-00.html

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117864-configure-esa-00.html

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/210533-SSL-Cipher-Strength-Details.html

CLI command sshconfig to review and modify algorithms in use.

The SMA does have limited options compared to the ESA.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCzv84351/?rfs=iqvred

[thaungtunzaw]

Hi Libin,

Thanks for your answer. The below articles are especially for SSL configuration on SMA.

But I need to edit and configuration of SSH on SMA. Please advise.

Thanks

[Libin Varghese]

You can use the CLI command sshconfig for the same.

However do note that modifying how ssh works can result in you loosing ssh access to the appliance depending on the ssh client in use.