From b50924b78cbcda8a96f31b44d6c1d0d193f08c0f Mon Sep 17 00:00:00 2001 From: Mathieu Simon Date: Fri, 22 Sep 2023 17:02:20 +0200 Subject: [PATCH] Clarify changes in the FortiOS 7.4 release branch, add mor references --- Fortinet-FortiOS.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/Fortinet-FortiOS.md b/Fortinet-FortiOS.md index 5ee66ba..3f8f9ef 100644 --- a/Fortinet-FortiOS.md +++ b/Fortinet-FortiOS.md @@ -2,9 +2,12 @@ FortiOS is an embedded operating system used on various appliances from Fortinet SSH into an appliance running FortiOS, or use a local serial connection in order to apply these options. -## FortiOS >= 7.4.1 +## FortiOS >= 7.4.0 -Starting with FortiOS 7.4.1 SSH host key algorithms become configurable and more key exchange algorithms (KEX) are configurable. +FortiOS 7.4 releases have introduced changes with individual releases, they are summarized into one single section. Notable changes: + +* 7.4.0: ``set ssh-hostkey-algo`` allows configuring one or more SSH hostkey algorithms. +* 7.4.1: ``set ssh-kex-algo`` allows configuring more KEX algorithms than previous releases. ``` config system global @@ -25,8 +28,13 @@ end **References:** - * [Fortinet document library: FortiGate / FortiOS 7.4.1 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.1/cli-reference/1620) - * [Fortinet document library: FortiGate / FortiOS 7.4.0 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/1620) +* [Fortinet document library: FortiGate / FortiOS 7.4.1 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.1/cli-reference/1620): + * ``ssh-kex-algo`` allows enabling or disabling **11** KEX algorithms. +* [Fortinet document library: FortiGate / FortiOS 7.4.0 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/1620): + * ``ssh-hostkey-algo`` is becomes available + * ``ssh-kex-algo`` allows enabling or disabling **8** KEX algorithms. +* [Fortinet document library: FortiGate / FortiOS 7.2.5 CLI Reference > CLI reference > config system global](https://docs.fortinet.com/document/fortigate/7.2.5/cli-reference/1620): + * ``ssh-hostkey-algo`` is **not** available. ## FortiOS >= 7.0.2 <= 7.4.0