Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: How to Disable Ciphers and Reconfigure Encryption?
Special Forums Cybersecurity How to Disable Ciphers and Reconfigure Encryption? Post 302503796 by DraconianTimes on Friday 11th of March 2011 05:16:40 PM
Old 03-11-2011
Ken,

Something to note about automated security scans (Retina, Nessus etc) is that they can give false-positives. The results of such scans still need to be interpreted by someone who understands the system's configuration, the impact of potential vulnerabilities and what compensating controls might be in place that mitigate the threat.

In terms of disabling weak ciphers and otherwise bolstering the security of the various services on the Solaris box, we need to know what it's actually running. Is your Solaris machine actually a Samba server which presents file shares to the XP systems, or acting as a client to a fileshare on an XP machine? Perhaps your Solaris machine is also a Web server? If you don't know what is running on your Solaris systems or how to find this out, I strongly recommend reading the Oracle Solaris 10 System Administrator Collection manuals which are part of the Solaris 10 Documentation.

Regarding Putty, I'll make an assumption here that you're connecting to the Solaris box via SSH, rather than Telnet or serial console. To better secure SSH, require public-key authentication and disallow remote logins from root. You *can* specify the ciphers in Protocol v2 sshd configs, but I would leave it well enough alone. Moving the SSH service from 22/tcp to something else (e.g. 3344/tcp) won't make you more secure, but should keep your auth logs quieter from attempted logins/automated scans if this box has its interface on a public network.

Nick
 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

File encryption/Key encryption ????

My dilemma, I need to send, deemed confidential, information via e-mail (SMTP). This information is sitting as a file on AIX. Typically I can send this data as a e-mail attachment via what we term a "mail filter" using telnet. I now would like to somehow encrypt the data and send it to a e-mail... (1 Reply)
Discussion started by: hugow
1 Replies

2. AIX

How to disable encryption below 128 bit in Websphere ?

Hi, Hi I have setup Websphere Portal and Apache server on Solaris. The problem is that clients are allowed to negotiate lower encryption levels and by default the Websphere Apache HTTP server accepts 56-bit keys (your Firefox client requested 256-bit AES below). So How to disable... (0 Replies)
Discussion started by: neel.gurjar
0 Replies

3. Solaris

Q:x4270_m2 reconfigure PCI card to slot 5?

Hello all, I have a problem with my x4270_m2 server. I have a GBE lan built into the back of my server and I have a QGE pci card in slot 2 to be used as a redundant. My server is not picking up the QGE lan card in slot2. From investigation of the /etc/path_to_inst, which shows: #grep e1000... (2 Replies)
Discussion started by: kerrygold
2 Replies

4. Cybersecurity

Weak Security Ciphers

Hi All * Need some help on testing if a server supports weak ciphers . Here is the command I ran : openssl s_client -connect HOSTNAME:443 -cipher LOW:EXP result : Connected : err num=110 openssl s_client -connect HOSTNAME:8000 -cipher LOW:EXP result : Connected : err... (0 Replies)
Discussion started by: noufel
0 Replies

5. OS X (Apple)

Weak Security Ciphers

Hi All * Need some help on testing if a server supports weak ciphers . Here is the command I ran : openssl s_client -connect HOSTNAME:443 -cipher LOW:EXP result : Connected : err num=110 openssl s_client -connect HOSTNAME:8000 -cipher LOW:EXP result : Connected : err... (1 Reply)
Discussion started by: noufel
1 Replies

6. Cybersecurity

SSH ciphers help

Hello, One of my co-worker changed our the ssh ciphers that we currently use. We made a change to /etc/ssh/ssh_config on our Solaris 10 servers. Security said that we have to use aes128-ctr or higher, but not aes128-cbc. The issue is that many of the ssh clients (Tectia) on Windows will not... (0 Replies)
Discussion started by: bitlord
0 Replies

7. Cybersecurity

File encryption tools with MAC address as an encryption key

Hi all, I'm looking for secure file encryption tools that use MAC address as encryption key. FYI, I'm using Red Hat Enterprise Linux OS. For example: when A wants to send file to B A will encrypt the file with B's computer MAC/IP address as an encryption key This file can only be decrypted... (2 Replies)
Discussion started by: sergionicosta
2 Replies

8. Solaris

Need to disable CBC mode cipher encryption along with MD5 & 96 bit MAC algorithm

Hi All Is any one know how to diable CBC mode cipher encryption along with MD5 & 96 bit MAC algorithm in solaris 10. Regards (4 Replies)
Discussion started by: amity
4 Replies

LEARN ABOUT MOJAVE

suninstall

suninstall(1M)                                            System Administration Commands                                            suninstall(1M)

NAME

       suninstall - install the Solaris operating system

SYNOPSIS

       suninstall

DESCRIPTION

       install-solaris(1M) is now the preferred command for starting and restarting the Solaris Installation program. It should be used instead of
       suninstall. suninstall is symbolically linked to install-solaris.

       suninstall is a forms-based and graphical subsystem for installing the operating system.

       suninstall exists only on the Solaris installation media (CD or DVD) and should only be invoked from there. Refer to the Solaris 10 Instal-
       lation Guide: Basic Installations for more details.

       suninstall allows installation of the operating system onto any standalone system. suninstall loads the software available on the installa-
       tion media. Refer to the Solaris 10 Installation Guide: Basic Installations for disk space requirements.

USAGE

       Refer to the Solaris 10 Installation Guide: Basic Installations for more information on the various menus and selections.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE         |      ATTRIBUTE VALUE        |
       +-----------------------------+-----------------------------+
       |Availability                 |SUNWcdrom (Solaris  instal-  |
       |                             |lation media)                |
       +-----------------------------+-----------------------------+

SEE ALSO

       pkginfo(1), install(1M), install-solaris(1M), pkgadd(1M), attributes(5)

       Solaris 10 Installation Guide: Basic Installations

NOTES

       It is advisable to exit suninstall by means of the exit options in the suninstall menus.

SunOS 5.10                                                          9 Sep 2004                                                      suninstall(1M)
All times are GMT -4. The time now is 04:09 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy