I am working on remediating the Terrapin vulnerability on a FortiSwitch. I have not addressed this vulnerability on a FortiSwitch before and figured that the command line structure may be the same as on the FortiGates. I learned that this is not the case.

This command works on the FortiGate but does not work on the FortiSwitch, can someone indicate the proper syntax to implement this fix on the FortiSwitch?

Config system global

set ssh-enc-algo aes256-ctr [aes256-gcm@openssh.com](mailto:aes256-gcm@openssh.com)

end
5 Spice ups

Don’t use brackets

set ssh-enc-algo aes256-ctr aes256-gcm@openssh.com