Instructions for connecting to Cyberguard from NAS:
Cause: Some versions of SSH on the cyberguard [FSecure-SSH 2.0.x] have a bug in their key exchange that breaks ssh communication. There is a known workaround employed by many ssh clients, but the current version of NAS does not include it until its next patch.
Solution: Employ an ssh relay host [referred to as a 'bastion' host]; if the ssh client on the bastion contains the workaround, NAS can communicate with the cyberguard through this relay channel.
Bastion Host Requirements: Windows or Linux server running a recent version of openssh. A non-privileged account's username/password is required. NAS must be able to reach the bastion host via the network, and the bastion must be able to reach the Cyberguard.
Instructions:

Setup device as normally in NAS w/ user&password and other settings
Check the "Connect with bastion host" box in the "Edit Device" page
Enter the hostname/IP of the bastion host, and the username/password of the un-privileged account
Save device, and connect as with other devices.

Recommended setup: standard Linux box running a recent distribution with openssh packages installed.

return to top