ASA SSH Behaviour

[kimby200602]

Hi all,

Can anyone tell me why ASA is unable to change its SSH service port and besides that it is telling its OS on simple telnet to port 22?

I think this is very frustrating and I was hoping that Cisco will change this behaviour on the 8.4 version of ASA.

telnet 192.168.X.X 22

SSH-2.0-Cisco-1.25

I know SSH could be restricted only to ssh allowed hosts, but I do not like doing it this way.

Do you have any suggestions on this? How can I change SSH service port (some kind of NAT) or mask default ASA SSH responce?

Thank you in advance!

K

[mirober2]

Hi Kimby,

Unfortunately, it is not possible to change this behavior on the ASA. If you control another device in front of the ASA, you could use static PAT to allow users to connect on a different port.

If this feature is important for you, I would encourage you to contact your Cisco account team and request that they file a product enhancement request to allow this functionality in the future.

-Mike