elie/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-16 21:45:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added section about FortiIOS 7.6, updated wording about changes with certain 7.4 releases

Mathieu Simon 2024-07-29 08:58:19 +02:00
parent ff635bcc60
commit 783f165ea0
1 changed files with 35 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
Fortinet-FortiOS.md

@ -2,12 +2,44 @@ FortiOS is an embedded operating system used on various appliances from Fortinet
SSH into an appliance running FortiOS, or use a local serial connection in order to apply these options.
## FortiOS >= 7.4.0
## FortiOS >= 7.6.0
Starting with FortiOS 7.6 some commands have moved from ``config system global`` to ``config system ssh-config``.
```
config system global
# These commands shoulnd't change default settings
set admin-ssh-v1 disable
set strong-crypto enable
# These commands do change default settings
set dh-params 8192
end
config system ssh-config
# These commands do change default settings
set ssh-enc-algo chacha20-poly1305@openssh.com aes256-gcm@openssh.com
set ssh-hostkey-algo ssh-ed25519
set ssh-kex-algo diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 curve25519-sha256@libssh.org
set ssh-mac-algo hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com
end
```
**References:**
* The following parameters previously present under ``config-system global`` have moved to ``config system ssh-config``: ``ssh-enc-algo``, ``ssh-hostkey-algo``, ``ssh-kex-algo`` and ``ssh-mac-algo``
* [Fortinet document library: FortiGate / FortiOS 7.6.0 CLI Reference > config system ssh-config](https://docs.fortinet.com/document/fortigate/7.6.0/cli-reference/207795941/config-system-ssh-config)
* [Fortinet document library: FortiGate / FortiOS 7.6.0 CLI Reference > config system global](https://docs.fortinet.com/document/fortigate/7.6.0/cli-reference/339914554/config-system-global)
## FortiOS >= 7.4.0 <= 7.6.0
FortiOS 7.4 releases have introduced changes with individual releases, they are summarized into a single section:
* 7.4.2: ``set ssh-hostkey-algo`` modified, it allows configuring more KEX algorithms than in previous releases
* 7.4.1: ``set ssh-kex-algo`` modified, it allows configuring more KEX algorithms than in previous releases
* 7.4.2: ``set ssh-hostkey-algo`` changed, more configurable SSH host key algorithms became available
* 7.4.1: ``set ssh-kex-algo`` changed, more configurable KEX algorithms became available.
* 7.4.0: ``set ssh-hostkey-algo`` added, it allows configuring one or more SSH host key algorithms
```