Trying to back up an ASAv appliance hosted in Azure (not sure thats important, but sharing anyway) over SSH. Running v2.0.8 Getting the following error message during the discovery:
Error: Could not connect to device
Discovery log:
Service check:
SSH: Service available
Service connection:
SSH: UNSUPPORTED_ALGORITHM
[Fixed in 2.2.3] Azure ASAv
-
- Posts: 198
- Joined: Thu Aug 05, 2021 6:35 pm
While this thread is a little older, I wanted to update this one with the information as well. Many ASAs come with stricter algorithms set up for SSH sec by default, and previously it would be necessary to add slightly less strict ones, such as diffie-hellman-group14-sha1 to make them compatible with Unimus.
We have a new Unimus version 2.2.3-Beta1 live now, which contains a new SSH library which comes with improvements to compatibility with newer and stricter algorithms and some other encountered limitations like when a device used some non-standard key sizes for key exchange algorithms. We now have support for much stricter algorithms which should prevent the vast majority of this type of errors in the future. You can find more information in our Beta branch thread
viewtopic.php?f=4&t=1454
and download a new version below
https://unimus.net/download-dev
So in case anyone is still tracking the progress of this thread and if you get a chance, give it a try and let us know if it worked as expected, or if you encounter any other issue.
We have a new Unimus version 2.2.3-Beta1 live now, which contains a new SSH library which comes with improvements to compatibility with newer and stricter algorithms and some other encountered limitations like when a device used some non-standard key sizes for key exchange algorithms. We now have support for much stricter algorithms which should prevent the vast majority of this type of errors in the future. You can find more information in our Beta branch thread
viewtopic.php?f=4&t=1454
and download a new version below
https://unimus.net/download-dev
So in case anyone is still tracking the progress of this thread and if you get a chance, give it a try and let us know if it worked as expected, or if you encounter any other issue.