I'm currently working on configuring SSH settings in Safeguard for Privileged Sessions (SPS) version 8.0 and encountered some difficulty when trying to include hmac-sha2-256-etm@openssh.com
and hmac-sha2-512-etm@openssh.com
in the MAC algorithm list. These algorithms appear in the SSH negotiation logs from some target systems (e.g., F5 or Linux servers), but when I attempt to add them via the SPS UI, I receive an XML validation error related to the input pattern. I understand that these MACs have been supported since SPS version 7, so I'm wondering if there's a recommended way to handle this within the UI, or if others have faced similar constraints with schema validation. Any suggestions or best practices would be appreciated.
Log : ssh.error(3): (svc/3vu9eucfCp2oFnE65Zi22X/safeguard_default:33/ssh): Unable to find a matching algorithm; type='mac', proxy_algos='hmac-sha2-256,hmac-sha2-512', server_algos='hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com', direction='server_to_client', side='server'