bruce.summers wrote:
hi jon,
well, honestly, I've got one of our security guys asking us why we dont use SSH to session into the FWSM...I recall reading somewhere that telnet is the transport output to session into the modules on a 6500 catalyst...and I dont see anywhere that ssh can be configured to allow you to use it to session into the modules...
So, I'm trying to relocate that bit of information so i can refer to it when I answer the question...but, i have not been able to find it and for the life of me, i dont recall where i read that...
bruce
Bruce
Not sure i have seen that documentation, i'll have a look around.
What i would say though is that even if it was a form of telnet it is not the security issue that telnetting across the network is. For example if you had ssh access to the 6500 switch and then used session to connect to the FWSM there would be no cleartext password to read on the LAN. I think the reasoning for not having ssh available is that you need to have access to the 6500 itself to be able to session to any of the modules and access to the 6500 should be controlled.
Jon
