Any plans for SSH 2 on the PIX?

tbissett · ‎07-30-2003

Anyone know if Cisco is working on implementing SSH version 2 for the PIX (and the VPN Concentrator, while we're at it)?

gfullage · ‎07-30-2003

No plans AFAIK. THe consensus within Cisco is to head towards IPSec as a management tool.

If you're worried about the known vulnerabilities with SSHv1, Cisco wrote it's own SSH code for IOS, PIX and VPN3000 from scratch, so it isn't susceptible to any of those known issues.

g.wrobel · ‎08-01-2003

"Cisco wrote it's own SSH code for IOS, PIX and VPN3000 from scratch, so it isn't susceptible to any of those known issues."

Well and what about the server and client side auth. and man in the middle attack?

This kind of security breach is not a problem anymore in ssh v2.