catalyst switches SSH Weak MAC Algorithms

[netops_cortera]

In have been running Nessus scans and all of my switches are coming back with SSH Weak MAC Algorithms and SSH Server CBC Mode Ciphers, i have been searching everywhere and the only thing i have found that says how to make changes, is to be running ssh server, my switches do not have this option, so i am guessing that i need a different version of IOS in-order to make these changes. i am pretty much running ipbase 12.2 everywhere 

These are the settings I need to make

Ciphers aes128-ctr,aes192-ctr,aes256-ctr
MACs hmac-sha1,hmac-ripemd160

[Karsten Iwen · Accepted solution]

You need IOS 15.5(2) for that. With the older releases it was not yet possible:

https://supportforums.cisco.com/document/12338141/guide-better-ssh-security

[netops_cortera]

i believe that version 15.5 is for routers and a few other types of devices, i am looking for something on switches like a 3560V2 or 3850, so far i can't fine anything to fix this problem. it show up on all of my security scans.

Do you know if Cisco is working on a fix for this problem ?