This article applies as of PRTG 22.2.76
The connection of SSH sensors does not work or new SSH sensors cannot be added. Which encryption algorithms do PRTG SSH sensors support?
The default SSH connection mode supports:
| Cipher | • aes128-ctr • aes128-gcm@openssh.com • aes192-ctr • aes256-ctr • aes256-gcm@openssh.com |
|---|---|
| Mac | • hmac-sha2-256 • hmac-sha2-256-etm@openssh.com • hmac-sha2-512 • hmac-sha2-512-etm@openssh.com • umac-128@openssh.com • umac-128-etm@openssh.com • umac-64@openssh.com • umac-64-etm@openssh.com |
| Kex | • curve25519-sha256 • curve25519-sha256@libssh.org • diffie-hellman-group14-sha256 • diffie-hellman-group16-sha512 • diffie-hellman-group18-sha512 • diffie-hellman-group-exchange-sha256 • ecdh-sha2-nistp256 • ecdh-sha2-nistp384 • ecdh-sha2-nistp521 • sntrup761x25519-sha512@openssh.com |
| Host Keys | • ecdsa-sha2-nistp256 • ecdsa-sha2-nistp256-cert-v01@openssh.com • ecdsa-sha2-nistp384 • ecdsa-sha2-nistp384-cert-v01@openssh.com • ecdsa-sha2-nistp521 • ecdsa-sha2-nistp521-cert-v01@openssh.com • rsa-sha2-256 • rsa-sha2-256-cert-v01@openssh.com • rsa-sha2-512 • rsa-sha2-512-cert-v01@openssh.com • sk-ecdsa-sha2-nistp256@openssh.com • sk-ecdsa-sha2-nistp256-cert-v01@openssh.com • sk-ssh-ed25519@openssh.com • sk-ssh-ed25519-cert-v01@openssh.com • ssh-ed25519 • ssh-ed25519-cert-v01@openssh.com |
The compatibility SSH connection mode is deprecated.
| Cipher | • aes192-cbc • aes256-cbc |
|---|---|
| Mac | • hmac-sha1 |
| Kex | • diffie-hellman-group1-sha1 • diffie-hellman-group14-sha1 |
| Host Keys | • ssh-dss |
Additional Notes:
- Always ensure that you use the matching SSH-Key. DSS-Keys do not work.
- The SSH Sensors use a fallback to SHA1 if the modern algorithms do not work. Just if you see an error in your logs pointing to these older ones.
In case you have any questions or concerns, reach out to support@paessler.com.
Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
