Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The ESXi host SSH daemon must use DoD-approved encryption to protect the confidentiality of remote access sessions.
Description
Discussion Text
Approved algorithms should impart some level of confidence in their implementation. Limit the ciphers to those algorithms which are FIPS-approved. Counter (CTR) mode is also preferred over cipher-block chaining (CBC) mode.
Note: This does not imply FIPS 140-2 validation.
Note: This does not imply FIPS 140-2 validation.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.