SSH

Supported connection modes:

Supported features:

  • Connections multiplexing (video export, session termination, pause, join, playback, raw data),

  • SCP (raw data, session termination, extracting separate files),

  • SFTP,

  • 2FA,

  • Port redirection (video export, session termination, pause, session join, playback, raw data),

  • SSH Agent forwarding (transparent, not recorded),

  • X11 - within SSH protocol (video export, session termination, pause, session join, playback, raw data),

  • Shell (video export, session termination, pause, session join, playback, raw data),

  • Terminal (video export, session termination, pause, session join, playback, raw data).

Supported encryption algorithms:

  • Server: RSA, DSA

  • Listener: RSA, DSA

Supported hashing algorithms:

  • MD5

  • SHA256

Supported types of SSH keys:

  • RSA

  • ED25519, ED25519-SK

  • ECDSA, ECDSA-SK

  • DSA (with the Legacy crypto option enabled)

Supported encoding: UTF-8


Supported ciphers:

Warning

The OpenSSH protocol has been updated to version 9.6 since Fudo Enterprise 5.4.8. The following lists are current as of version 5.4.8.

  • If you are using a version of Fudo Enterprise earlier than 5.4.8, please refer to the 5.3 or earlier documentation.

  • If you are using version 5.4.7, please read the warning regarding MAC algorithms below.

  • Supported key exchange algorithms:

    • curve25519-sha256

    • curve25519-sha256@libssh.org

    • diffie-hellman-group-exchange-sha256

    • diffie-hellman-group16-sha512

    • diffie-hellman-group18-sha512

    • diffie-hellman-group14-sha256

    • ecdh-sha2-nistp256

    • ecdh-sha2-nistp384

    • ecdh-sha2-nistp521

    • sntrup761x25519-sha512@openssh.com

  • additionally, there are 3 more key exchange algorithms supported when the Legacy crypto option is enabled:

    • diffie-hellman-group14-sha1

    • diffie-hellman-group1-sha1

    • diffie-hellman-group-exchange-sha1


  • Supported host key algorithms:

    • ecdsa-sha2-nistp256-cert-v01@openssh.com

    • ecdsa-sha2-nistp384-cert-v01@openssh.com

    • ecdsa-sha2-nistp521-cert-v01@openssh.com

    • ssh-ed25519-cert-v01@openssh.com

    • rsa-sha2-512-cert-v01@openssh.com

    • rsa-sha2-256-cert-v01@openssh.com

    • ecdsa-sha2-nistp256

    • ecdsa-sha2-nistp384

    • ecdsa-sha2-nistp521

    • ssh-ed25519

    • rsa-sha2-512

    • rsa-sha2-256

    • sk-ecdsa-sha2-nistp256-cert-v01@openssh.com

    • sk-ecdsa-sha2-nistp256@openssh.com

    • sk-ssh-ed25519-cert-v01@openssh.com

    • sk-ssh-ed25519@openssh.com

  • plus, there are 4 more host key algorithms supported when the Legacy crypto option is enabled:

    • ssh-rsa

    • ssh-rsa-cert-v01@openssh.com

    • ssh-dss

    • ssh-dss-cert-v01@openssh.com


  • Supported encryption algorithms:

    • chacha20-poly1305@openssh.com

    • aes128-ctr

    • aes192-ctr

    • aes256-ctr

    • aes128-gcm@openssh.com

    • aes256-gcm@openssh.com

  • additionally, there are 10 more encryption algorithms supported when the Legacy crypto option is enabled:

    • aes128-cbc

    • aes192-cbc

    • aes256-cbc

    • rijndael-cbc@lysator.liu.se

    • 3des-cbc

    • arcfour256

    • arcfour128

    • arcfour

    • blowfish-cbc

    • cast128-cbc


  • Supported MAC algorithms:

    • umac-64-etm@openssh.com

    • umac-128-etm@openssh.com

    • hmac-sha2-256-etm@openssh.com

    • hmac-sha2-512-etm@openssh.com

    • umac-64@openssh.com

    • umac-128@openssh.com

    • hmac-sha2-256

    • hmac-sha2-512

  • plus, there are 11 more MAC algorithms supported when the Legacy crypto option is enabled:

    • hmac-sha1

    • hmac-sha1-etm@openssh.com

    • hmac-sha1-96-etm@openssh.com

    • hmac-sha1-96

    • hmac-ripemd160

    • hmac-ripemd160@openssh.com

    • hmac-ripemd160-etm@openssh.com

    • hmac-md5

    • hmac-md5-96

    • hmac-md5-etm@openssh.com

    • hmac-md5-96-etm@openssh.com

Warning

Version Fudo Enterprise 5.4.7 introduced a reduced list of supported MAC algorithms:

  • hmac-sha2-256

  • hmac-sha2-512

  • umac-128@openssh.com

  • umac-64@openssh.com

plus 6 more MAC algorithms supported when the Legacy crypto option enabled:

  • hmac-md5

  • hmac-md5-96

  • hmac-ripemd160

  • hmac-ripemd160@openssh.com

  • hmac-sha1

  • hmac-sha1-96

Notes:

  • SSH protocol implementation supports user authentication over RADIUS in challenge-response mode.