News
Abstract
[<p>The version 7.5 documentation for IBM DataPower Gateway is not the latest available information. This document covers late breaking updates that are not in IBM Knowledge Center.<br/><br/>Last updated, October 2017.</p>]
Content
The late breaking updates in this document apply to DataPower Gateway version 7.5 documentation.
To access specific updates, click the appropriate link:
To view the change history of this document, see Change history
The corrections in the following sections apply to DataPower Gateway version 7.5 in IBM Knowledge Center.
Upgrade
- When you upgrade to 7.5.2, the following changes apply to SSH connection.
- Disabled diffie-hellman-group-exchange-sha1 and diffie-hellman-group1-sha1 algorithms by default.
- Disabled MD5-based MAC algorithms.
- Limited DH-GEX to 4096 bits for Cisco devices.
- The enable-legacy-kex command for the SSH server profile in available in 7.5.2.0.
- The enable-legacy-kex command for the SSH client profile is available in 7.5.2.7.
- Default cipher suites
- Default KEX algorithms
- Default MAC algorithms
- The SSH client always initiates the banner exchange.
- During the SSH2 banner exchange, use CR+LF termination for the banner.
- The SSH client ignores any message from the SSH server until the banner exchange.
Although the key exchange algorithms were updated, they cannot be edited. If you need to enable the legacy algorithm you can use the hidden enable-legacy-kex yes command.
To help you understand the support, review the following supported algorithms and cipher suites.
- chacha20-poly1305@openssh.com (CHACHA20-POLY1305_AT_OPENSSH.COM)
aes128-ctr (AES128-CTR)
aes192-ctr (AES192-CTR)
aes256-ctr (AES256-CTR)
aes128-gcm@openssh.com (AES128-GCM_AT_OPENSSH.COM)
aes256-gcm@openssh.com (AES256-GCM_AT_OPENSSH.COM)
arcfour256 (ARCFOUR256)
arcfour128 (ARCFOUR128)
aes128-cbc (AES128-CBC)
3des-cbc (3DES-CBC)
blowfish-cbc (BLOWFISH-CBC)
cast128-cbc (CAST128-CBC)
aes192-cbc (AES192-CBC)
aes256-cbc (AES256-CBC)
arcfour (ARCFOUR)
rijndael-cbc@lysator.liu.se (RIJNDAEL-CBC_AT_LYSATOR.LIU.SE)
- curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
diffie-hellman-group-exchange-sha256
diffie-hellman-group14-sha1
- umac-64-etm@openssh.com
umac-128-etm@openssh.com
hmac-sha2-256-etm@openssh.com
hmac-sha2-512-etm@openssh.com
hmac-sha1-etm@openssh.com
umac-64@openssh.com
umac-128@openssh.com
hmac-sha2-256
hmac-sha2-512
hmac-sha1
Remember the following points for the establishment of an SSH connection.
Installation
- The command to troubleshoot power supplies states to use show other-sensors. The correct command is show sensors-other. This problem exists also in the available PDF versions of the installation documentation.
GatewayScript
- Added supported for the undocumented Global clear gatewayscript-cache path command. This command clears the data from the GatewayScript path cache.
File management
- The documentation provides inconsistent information about which directories of the DataPower Gateway you create and delete subdirectories. You can create and remove subdirectories in the following directories.
- isamwebroot
- local
- policyframework
Monitors
- The documentation for the Message Filter Action type command incorrect states the block keyword instead of the shape keyword. For correct information see type command.
Change history
Last modified: 30 October 2017.
- 30 October 2017: Added information about nonexisting block keyword for Message Filter Action type command.
- 19 October 2017: Added information about which directories you can create and remove subdirectories.
- 19 July 2016: Added data about the wrong command troubleshooting command in the installation documentation.
- 17 June 2016: Added data about the undocumented Global command.
- 22 March 2016: Created for 7.5.
[{"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"7.5","Edition":"Edition Independent","Line of Business":{"code":"LOB45","label":"Automation"}}]
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg21974106