cybersecurity

The original post: /r/cybersecurity by /u/Square_Classic4324 on 2024-11-14 05:08:11.

I have a question about encrypt in transit services such as SSH. On the client side I've edited the conf files to 1, prioritize allowed ciphers and 2, block obsolete ciphers.

But the vulnerability scanning results still come back with tons of unsecure ciphers findings. Is that because the vuln scanning tools are trying to negotiate a connection themselves rather than using what is on the client?

Do I have to edit the server conf as well to suppress these findings? The findings are getting executive attention and at this point I just want to make it go away even though there's no chance of a client actually being able to initiate a connection with an excluded cipher.

Thank-you