Title

/etc/sshd_config - Protocol version must be securely configured. (Cat II impact)

Discussion

Restricts OpenSSH so it uses only SSH Protocol 2. This should be set for all SSH methods of authenticating.

Check Content

1. Open a terminal session and enter the following command. more /etc/sshd_config 2. Ensure the value Protocol is set to "2". If the value Protocol is not set to "2", this is a finding.

Fix Text

1. Open a terminal session and enter the following command. sudo pico /etc/sshd_config 2. Edit the value "Protocol" and set it to "2". 3. Save the file.

Additional Identifiers

Rule ID: SV-37209r1_rule

Vulnerability ID: V-25275

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.