+SYS.1.3.A8 Encrypted Access via Secure Shell (S)

SYS.1.3.A8 Encrypted Access via Secure Shell (S)

Only Secure Shell (SSH) SHOULD be used to create an encrypted and authenticated interactive connection between two IT systems. All other protocols whose functions are covered by Secure Shell SHOULD be disabled completely. For authentication, users SHOULD primarily use certificates instead of passwords.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.43 Attack with Specially Crafted Messages