SSL v1 Session key retrieval in cisco IPS

[sashimoy11]

Hi All,

In network audit i have got the below mentioned  comment from the auditor for cisco IPS 4270 device. but I am not getting  any soluation for the same. Kindly help me out on this.

SSL v1 Session key retrieval

The remote SSH daemon supports connections made

using the version 1.33 and/or 1.5 of the SSH

protocol. These protocols are not completely

cryptographically safe so they should not be used.

With regards,

Sashi

[Jennifer Halim · Accepted solution]

Currently there is no way to only allow SSH version 2 and disable SSH version 1 on IPS.

Here is the enhancement request that has been filed for your reference:CSCsk84977

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsk84977

Hope this answers your question.