Help disabling SSL cipher - Cisco Switch SG350

[calexfiel]

Based on result penetration test I have to disable all SSL export grade ciphers, to prevent 'SSL FREAK' (Factoring Attack on RSA-EXPORT Keys) 

Someone can help?

Thank you in advance,

[Georg Pauwen]

Hello,

as far as I recall, FREAK applies to keys =< 512 bit encryption. The problem is that the SG350 switches do not run a full IOS (but rather a stripped down version). In 'full' IOS versions, you could specify which keys are allowed using the command 'ip ssh server algorithm encryption'...

For the SG350, you can configure a SSH key length:

Security > SSL Server > SSL Server Authentication Settings

If you set it to 1024, anything below should, in theory, not be allowed...