Increase support/make configurable Azure Bastion https client SSH ciphers

Question

Hello all,

We have an encryption standard that holds chacha20-poly1305@openssh.com as the only cipher that can be used.

I now need to seek a security exception to utilize aes256-ctr as a cipher for SSH in order to support the Azure Bastion https client SSH client.

Is there a feature I'm missing that allows me to configure ciphers for the Azure Bastion https client SSH client? Or is there an ETA on this feature?

Thanks,

Matt

Answer 1

Hi @Matthew Brown

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

ChaCha20-Poly1305 PolyChacha ciphers are supported by Windows and can be enabled in scenarios where customers control the OS. 

Reference: https://learn.microsoft.com/en-us/azure/bastion/bastion-overview#key

Could you please share me the exact error message you are getting so that we can assist you further. Any logs would be appreciated.

Kindly let us know if the above helps or you need further assistance on this issue.

If this answers your query, do click **Accept Answer** and **Yes** for was this answer helpful. And, if you have any further query do let us know.

Thanks,

Sai Prasanna.