elie/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-16 21:45:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update for FortiOS 7.4.2 solely based on manuals, but no update in real-life validation

Mathieu Simon 2024-01-10 16:56:39 +01:00
parent bb64df98e0
commit b0bb7ba5bb
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Fortinet-FortiOS.md

@ -6,8 +6,9 @@ SSH into an appliance running FortiOS, or use a local serial connection in order
FortiOS 7.4 releases have introduced changes with individual releases, they are summarized into a single section:
* 7.4.0: ``set ssh-hostkey-algo`` added, it allows configuring one or more SSH host key algorithms
* 7.4.2: ``set ssh-hostkey-algo`` modified, it allows configuring more KEX algorithms than in previous releases
* 7.4.1: ``set ssh-kex-algo`` modified, it allows configuring more KEX algorithms than in previous releases
* 7.4.0: ``set ssh-hostkey-algo`` added, it allows configuring one or more SSH host key algorithms
```
config system global
@ -27,14 +28,16 @@ end
```
**References:**
* [Fortinet document library: FortiGate / FortiOS 7.4.1 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.1/cli-reference/1620):
* ``ssh-kex-algo`` allows enabling or disabling **11** KEX algorithms.
* [Fortinet document library: FortiGate / FortiOS 7.4.2 CLI Reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.2/cli-reference/2620/config-system-global):
* ``ssh-hostkey-algo`` allows enabling or disabling **7** HostKeyAlgorithms
* [Fortinet document library: FortiGate / FortiOS 7.4.1 CLI Reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.1/cli-reference/1620):
* ``ssh-hostkey-algo`` allows enabling or disabling **5** HostKeyAlgorithms
* ``ssh-kex-algo`` allows enabling or disabling **11** KEX algorithms
* [Fortinet document library: FortiGate / FortiOS 7.4.0 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/1620):
* ``ssh-hostkey-algo`` becomes available
* ``ssh-kex-algo`` allows enabling or disabling **8** KEX algorithms.
* ``ssh-kex-algo`` allows enabling or disabling **8** KEX algorithms
* [Fortinet document library: FortiGate / FortiOS 7.2.5 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.2.5/cli-reference/1620):
* ``ssh-hostkey-algo`` is **not** available.
* ``ssh-hostkey-algo`` is **not** available
## FortiOS >= 7.0.2 <= 7.4.0