Solarwinds is a server where customers can save their backups. This seems to work with SSH ciphers in order for the firewall be able to achieve the connections securely and send the backups.

However, this SolarWinds server may not support all the ciphers that the firewall offers so we need to choose carefully the SSH ciphers in case we need to mitigate any vulnerability. For example, the CVE-2023-48795 states that we need to change the ciphers in order to mitigate this vulnerability and the ciphers used as an example are the following ones:

ssh ciphers [[email protected] [email protected]]

These ciphers specifically seem to be incompatible for SolarWinds, however, the KB states that we need to remove the ChaCha20 cipher to mitigate this vulnerability, so we should be able to use some other ciphers that are compatible with SolarWinds.

"This issue can be completely remediated by excluding the chacha20-poly1305 cipher from SSH"

Hello , We have added Ciphers to mitigate Advisory shared by juniper but after the change we are not able to backup our device in SolarWinds as its automatic backup schduled in NCM tool we need resolution for same for other location where ciphers not configured its working properly Juniper details : Model : SRX 340 Serial Number : CY2920AF0607 https://supportportal.juniper.net/s/article/2024-01-Reference-Advisory-Junos-OS-and-Junos-OS-Evolved-Impact-of-Terrapin-SSH-Attack-CVE-2023-48795?language=en_US

Configure ciphers that match with the ones supported by solarwinds. The ciphers supported by SolarWinds might vary. We are not sure if all the servers support the exact same ones as this information is out of our scope.