Support for SSH Cipher AES-256-GCM

FinanzInformatik

A few days ago we've got security-problems regarding the configured ssh ciphers on network devices.
To solve our open Security-Case, we need to configure the ssh ciphers aes256-gcm.

Those are not listed in the list of supportet ciphers for Orion NCM:

https://solarwindscore.my.site.com/SuccessCenter/s/article/Supported-algorithms-and-cipher-for-NPM-and-NCM?language=en_US

So the now configured ssh ciphers are not supported and we can not backup the configuration files of the network device.

8008s

This cipher is also needed to remediate CVE-2023-48795 (NVD - CVE-2023-48795 (nist.gov)). Enabling this cipher on a cisco network device (Cisco Nexus 9k) disables the ability to use the Solarwinds web console SSH feature as well, as the two systems cannot negotiate a common cipher.