Disable Telnet... NOW, KID!

[icecream-guy]

On the Cisco Licensing Portal (www.cisco.com/go/license) you can request for free "K9" encryption licenses. As a requirement, you need to accept and declare that you are not exporting Cisco's product to embargoed destinations and countries designated as supporting terrorist activities. Countries listed in Part 746 of the EAR as embargoed destinations requiring a clearance are Cuba, Iran, North Korea, Sudan, and Syria.

I think that's just for the ASA"s because one cannot telnet into an ASA.

[SimonV]

This is where I got that quote from:

https://learningnetwork.cisco.com/thread/1914

I'm really not convinced that you have to pay a license fee to get SSH

[deanwebb]

one cannot telnet into an ASA.

Let an unaccountable third party manage your network for 10 years and you'll see all kinds of ASAs using telnet.

[icecream-guy]

On the Cisco Licensing Portal (www.cisco.com/go/license) you can request for free "K9" encryption licenses. As a requirement, you need to accept and declare that you are not exporting Cisco's product to embargoed destinations and countries designated as supporting terrorist activities. Countries listed in Part 746 of the EAR as embargoed destinations requiring a clearance are Cuba, Iran, North Korea, Sudan, and Syria.

I think that's just for the ASA"s because one cannot telnet into an ASA.....

....on the outside interface.

I stand corrected.

[NetworkGroover]

They CHARGE to run SSH!?  Sorry it's been a while since I've dealt with anything Cisco.

And yeah, at the time I'm sure it made sense - hopefully now people know it's just a bad idea and maybe you should spend the extra $$$.  Or just accept the risk.

We'll accept the risk.

Wow, that was much easier on the budget than paying for security. Anywhere else we can accept some risk?

You sir, are ready for a highly-paid CFO position.