SSH ciphers change

I opened support case and engineer gave me a solution. It's pretty simple:

tmsh modify sys sshd include "
MACs hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com
Ciphers aes128-ctr,aes192-ctr,aes256-ctr"

It look's like it's working. 🙂

TMOS comnfiguration of SSH now look's like:

sys sshd {
    banner enabled
    banner-text "Any unauthorized access is strictly prohibited
and will be prosecuted to the full extent of
applicable local and international law.
All access is monitored."
    inactivity-timeout 900
    include "
MACs hmac-sha1,hmac-ripemd160,hmac-ripemd160@openssh.com
Ciphers aes128-ctr,aes192-ctr,aes256-ctr"
    log-level verbose
}