Xshell Forum

Not able to SSH to firewall using Xshell5

Last post: Thursday, August 18, 2016 7:15 PM by Support, 8 reply

 
Wednesday, August 19, 2015 3:39 AM - xeslucifer

Not able to SSH to firewall using Xshell5

 
Hi, I'm not able to SSH to my firewall using xshell5, I've try to use Putty or Tera Term SSH to the same firewall without any issue.


Xshell 5 (Build 0697)
Copyright (c) 2002-2015 NetSarang Computer, Inc. All rights reserved.

Type `help' to learn how to use Xshell prompt.
[c:\~]$ ssh admin@192.168.146.120


Connecting to 192.168.146.120:22...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.
[11:38:34] Version exchange initiated...
[11:38:34] server: SSH-2.0-JoVqY--NK7k8JSd
[11:38:34] client: SSH-2.0-nsssh2_5.0.0020 NetSarang Computer, Inc.
[11:38:34] SSH2 is selected.
[11:38:35] Algorithm negotiation initiated...
[11:38:35] key exchange: diffie-hellman-group1-sha1
[11:38:35] host key: ssh-rsa
[11:38:35] outgoing encryption: aes256-ctr
[11:38:35] incoming encryption: aes256-ctr
[11:38:35] outgoing mac: hmac-sha1
[11:38:35] incoming mac: hmac-sha1
[11:38:35] outgoing compression: none
[11:38:35] incoming compression: none

Connection closed by foreign host.

Disconnected from remote host(192.168.146.120:22) at 11:38:35.

Type `help' to learn how to use Xshell prompt.
[c:\~]$

Program Ver. : Xshell 5
Thursday, August 20, 2015 8:47 AM - Support

Re: Not able to SSH to firewall using Xshell5

 
Firstly, please try upgrading to the latest version by clicking the Check for Updates in the Help menu.

If the problem persists, please send us the following information:

1. What is the name and version of the firewall?
2. If there are any error messages (popup window), please tell us the full message.
3. Enable the SSH packets and Raw data option in Putty (Session > Logging) and send us the log file.



Technical Support

Like us on Facebook
Follow us on Twitter
Visit our blog Blog
Friday, August 21, 2015 12:30 AM - xeslucifer

Re: Not able to SSH to firewall using Xshell5

 
Hi

I've upgraded to the latest version, still facing the same problem:

Xshell 5 (Build 0729)
Copyright (c) 2002-2015 NetSarang Computer, Inc. All rights reserved.

Type `help' to learn how to use Xshell prompt.
[c:\~]$ ssh admin@192.168.146.120


Connecting to 192.168.146.120:22...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.
[08:23:28] Version exchange initiated...
[08:23:28] server: SSH-2.0-JoVqY--NK7k8JSd
[08:23:28] client: SSH-2.0-nsssh2_5.0.0022 NetSarang Computer, Inc.
[08:23:28] SSH2 is selected.
[08:23:28] Algorithm negotiation initiated...
[08:23:28] key exchange: diffie-hellman-group1-sha1
[08:23:28] host key: ssh-rsa
[08:23:28] outgoing encryption: aes128-cbc
[08:23:28] incoming encryption: aes128-cbc
[08:23:28] outgoing mac: hmac-sha1
[08:23:28] incoming mac: hmac-sha1
[08:23:28] outgoing compression: none
[08:23:28] incoming compression: none

Connection closed by foreign host.

Disconnected from remote host(192.168.146.120:22) at 08:23:28.

Type `help' to learn how to use Xshell prompt.
[c:\~]$

There is no error pop up; no a single error message

This is a Fortigate firewall running on 5.4 beta3 firmware.


Thanks
Attachment putty.log (44.4 KB)  
Tuesday, August 25, 2015 8:15 AM - Support

Re: Not able to SSH to firewall using Xshell5

 
The only difference between Putty and Xshell in this case was the key exchange algorithm. Please try selecting diffie-hellman-group-exchange-sha1 for SSH key exchange algorithm in the Session properties > SSH > Security > Key Exchange List.

If the problem persists, please send us the full Xshell connection log again.






Technical Support

Like us on Facebook
Follow us on Twitter
Visit our blog Blog
Wednesday, August 26, 2015 11:59 PM - xeslucifer

Re: Not able to SSH to firewall using Xshell5

 
Hi

Please refer to the attachment; even after selecting "deffie-hellman-group1-sha1" I'm still not able to ssh to my firewall.

Please let me know where I can get the full ssh logs on xshell.

Thanks
Monday, August 31, 2015 2:38 AM - Support

Re: Not able to SSH to firewall using Xshell5

 
Please select diffie-hellman-group-exchange-sha1 and not diffie-hellman-group1-sha1. It is the second one from the bottom.



Technical Support

Like us on Facebook
Follow us on Twitter
Visit our blog Blog
Wednesday, September 2, 2015 5:40 AM - xeslucifer

Re: Not able to SSH to firewall using Xshell5

 
Hi

Thanks for the tips.

It is working now; I'm able to ssh to my Firewall.
Monday, August 15, 2016 3:50 PM - Rzvi

Re: Not able to SSH to firewall using Xshell5

 
Hi,

How can we solve the same problem in Xshell 4 (build 0243).

The same problem is there. The putty is working fine but with Xshell it is not connecting.

Thnx
Thursday, August 18, 2016 7:15 PM - Support

Re: Not able to SSH to firewall using Xshell5

 
Can we see the log messages or any other messages you see in a pop up dialog box?

SSH connection log messages can be shown after turning on the SSH trace option in the Advanced category of the session profile.

Technical Support

Like us on Facebook
Follow us on Twitter
Visit our blog Blog