issues with ssh access from macos/ linux

Showing results for 
Show  only  | Search instead for 
Did you mean: 

issues with ssh access from macos/ linux

L3 Networker

Hi folks I am having issues with access via ssh from macos/ linux pcs


pc ~ % ssh admin@                                                                                                                                         

Unable to negotiate with port 22: no matching host key type found. Their offer: ssh-rsa                                                                          

I can access it using this modified command:   

ssh -oHostKeyAlgorithms=+ssh-rsa admin@


I have added these options to ssh profile, restarted ssh server/ rebooted as well for testing, but still getting same results 


Unable to negotiate with port 22: no matching host key type found. Their offer: ssh-rs


Screenshot 2023-05-06 at 10.49.13 AM.png


Does anyone know what needs to be configured on the palo alto to resolve ssh compatibility issues?

thank you


Community Team Member

Hi @nevolex ,


Is this a VM-Series FW hosted in the public cloud? 

LIVEcommunity team member
Stay Secure,
Don't forget to Like items if a post is helpful to you!

L1 Bithead

Did you select the SSH Service Profile you just made on Device\Setup\Management\SSH Management Profile Settings? And then restart the ssh server. (it will tell you to do so after commit)

I've just made the same setting for the same reason and missed this step. 

L2 Linker


For a successful ssh connection at least one mutually-supported choice for each parameter, OpenSSH considers SSH-RSA as a weak algorithm and it has been deprecated since OpenSSH 8.8, it is still supported but disabled by default.
Can you try to connect to the FW by adding the following to your command line: -oHostKeyAlgorithms=+ssh-rsa  

ssh -oHostKeyAlgorithms=+ssh-rsa username@x.x.x.x

Network Security Engineer
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!