Forum Discussion
ROlsen_280608
Nimbostratus
NimbostratusChange weak HMAC
We've got a 5250 running 11.6.1 and the security scan pinged for Weak Ciphers and MAC's. I have been able to reset the Ciphers to 128bit or better but none of the MAC's I've tried are acceptable. Whe...
SHA256 HMAC was introduced in OpenSSH 4.4/4.4p1
11.x.x uses 4.3p2: K14457: BIG-IP third-party software matrix (11.x)
12.x.x uses 5.3p1 K65097545: BIG-IP third-party software matrix (12.x - 13.x)
If you want sha2 you need to go with 12.1.3 or 13.1.0
