Troubleshooting
Problem
Custom modifications in /etc/ssh/sshd_config can cause ssh connection being unavailable after QRadar upgrade. During the server boot an error message can be seen on the server console informing that sshd server failed to start, due to sshd_config error.
Symptom
The following error is displayed on the QRadar appliance console screen during boot time:
Starting sshd: /etc/ssh/sshd_config line 147: Directive 'Ciphers' is not allowed within a Match block
Also there will be no SSH access to the QRadar appliance once it has booted.
[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Upgrade","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2;7.3","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21969116