SSH

[denvermtn]

I have taken over the responsiblilty of an existing 515 pix and I'm trying to confirm the ssh version installed. The ios is 6.1 (1) so I think its version 2 but I can't bring it up to prove it.

[brianmkelly]

All of the PIX IOS software versions use SSH version 1.5 We spoke to a Cisco Engineer about this a couple of months ago, and he said that the developers do not feel that the demand is there to develop version 2 into the PIX code. He recommended using a 3rd party "policy pusher" software solution, or VPN to the box.

I wish Cisco would develop SSH version 2 also because version 1.5 has some vulnerabilites as listed on the Cisco TAC pages.

[gbbromley]

You can find out quite quickly by:

telnet PIXIP 22

This should display the banner and therefore version in use. Alternatively, look for scanssh which does across networks.

All Cisco stuff presently uses 1.5, with full bugs/vulnerabilities. I'm hoping that Cisco start rolling in OpenSSH and remove the commercial SSH.