Banners in router !

[Jonn cos]

Hi all experts.

When i telnet to my router's ssh port, this is what i get

SSH-1.99-Cisco-1.25

Is there anyway from preventing this banner to appear ??

[garapoglou]

Hi,

You cannot remove it, as it is no banner. It's a part of the SSH service.

Best regards,

Giorgos

[Leo Laohoo]

Alternatively, use Telnet.

[Antonio Knox]

leolaohoo wrote:
Alternatively, use Telnet.

LOL!  Use telnet.  That's funny, man.

[hobbe]

Hi

There are several different types of banners.

There are some banners that are configurable such as the login banner or the motd banner or the exec banner.

(and more)

The one you are asking about is not one of them. The one you are asking about is a banner that comes from the service itself.

Unless you change it in the binary it will not be able to be changed. I do not know this to be a configurable option.

However I would recomend not to fiddle around in the binary.

If you are afraid that it will tell the badguys what you are running so that they can find out what bugs it is affected by, yes it is a valid concern however they will most likely find out anyway through the way your router os is handeling packets and so on.

so since it is something you can not easily do anything about I would not loose any sleep over it.

Good luck

HTH

[andtoth]

Hi,

Which SSH client are you using? Could you try with PuTTY with default settings and check if you're seeing the same?

I believe this is just your SSH client printing out verbosely the version running on the Cisco device. This is usually negotiated in the background, and SSH clients only print it out when explicitly told to do so.

Best regards,

Andras

[ted reese]

Mine does the same, we run a security scan and this stands out.  Anything else we can do to not disclose this vurlnerability?

Thank you,

Ted