There is a need to disable CBC ciphers for SSH. This can be done from admin shell via 'sshd-config --cbc off'
However when checking SSH status via 'sshd-config status', following message is displayed:
"Support for CBC ciphers is ENABLED"
Possible display issue.
Symantec is aware of this issue and will update this document when a solution becomes available. It is not necessary to log a support case on this issue. Please subscribe to this article to be notified of any updates.
CBC ciphers for SSH appear to be enabled even when explicitly turned of from admin shell
Subscribing will provide email updates when this Article is updated. Login is required.