issues with ssh access from macos/ linux

[nevolex]

Hi folks I am having issues with access via ssh from macos/ linux pcs

pc ~ % ssh admin@10.10.10.1                                                                                                                                         

Unable to negotiate with 10.10.10.1 port 22: no matching host key type found. Their offer: ssh-rsa                                                                          

I can access it using this modified command:   

ssh -oHostKeyAlgorithms=+ssh-rsa admin@10.10.10.1

I have added these options to ssh profile, restarted ssh server/ rebooted as well for testing, but still getting same results 

Unable to negotiate with 10.10.10.1 port 22: no matching host key type found. Their offer: ssh-rs

Does anyone know what needs to be configured on the palo alto to resolve ssh compatibility issues?

thank you

[JayGolf]

Hi @nevolex ,

Is this a VM-Series FW hosted in the public cloud? 

[TorokAdam]

Did you select the SSH Service Profile you just made on Device\Setup\Management\SSH Management Profile Settings? And then restart the ssh server. (it will tell you to do so after commit)

I've just made the same setting for the same reason and missed this step. 

[akuzhuppilly]

Hello,

For a successful ssh connection at least one mutually-supported choice for each parameter, OpenSSH considers SSH-RSA as a weak algorithm and it has been deprecated since OpenSSH 8.8, it is still supported but disabled by default.
Can you try to connect to the FW by adding the following to your command line: -oHostKeyAlgorithms=+ssh-rsa  

Eg;
ssh -oHostKeyAlgorithms=+ssh-rsa username@x.x.x.x