What is device SSH security?

NSP SSH algorithm support for mediation

The following SSH client cryptographic algorithms are deprecated by the NSP and disabled by default for classic management and model-driven mediation in the NSP:

• Cipher: arcfour256,arcfour128,3des-cbc,blowfish-cbc

• Key Exchange: diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 (classic management mediation only)

• MAC: hmac-md5,hmac-sha1-96,hmac-md5-96

• Host Key: ssh-dss

For compatibility with older devices, you can restore NFM-P support for the disabled algorithms, as described in How do I restore support for disabled NE SSH algorithms?.

Note: Restoring the disabled algorithms is not recommended, but may be required as an interim measure until the devices in your network support the newer SSH algorithms.