Feature Requirements |
Series |
Models |
|---|---|---|
When an SSL policy is created, the default DH modulus value is 3072, and the value can be changed to 2048 or 4096. The signature algorithms enabled by default are ed25519, ed448, rsa-pss-pss-sha256, rsa-pss-pss-sha384, rsa-pss-pss-sha512, rsa-pss-rsae-sha256, rsa-pss-rsae-sha384, and rsa-pss-rsae-sha512 and can be configured independently, which increases security. After an SSL policy is created, if the SSL handshake fails because signature algorithms do not match or the DH modulus length is too long, run the diffie-hellman modulus command to adjust the DH modulus length. Run the signature algorithm-list command to adjust the signature algorithm. |
NetEngine 8000 F |
NetEngine 8000 F2A/NetEngine 8000 F1A |
The SCP cannot interwork with the WinSCP tool. |
NetEngine 8000 F |
NetEngine 8000 F2A/NetEngine 8000 F1A |