For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_Stewart's avatar
Brian_Stewart
Icon for Nimbostratus rankNimbostratus
Dec 07, 2015

Confirming changes have been applied to F5 mgmt/config interfaces:

 

Red Hat article https://access.redhat.com/solutions/420283 is related to this topic and provides some simple remote confirmation tests we all know and love via ssh client parameters.

 

  1. verify remotely from SSH client ssh -vv -oMACs=hmac-md5 10.x.y.z . . .output snipped . . . no matching mac found: client hmac-md5 server hmac-sha1,hmac-ripemd160

     

  2. verify remotely from SSH client ssh -vv -oCiphers=aes128-cbc 10.x.y.z . . .output snipped . . . no matching cipher found: client aes128-cbc server aes128-ctr,aes192-ctr,aes256-ctr