Error message: "SSH: No ECDSA host key is known for X.X.X.X and you have requested strict checking."

Products

• ISG Proxy

Issue/Introduction

Edge SWG (ProxySG) fails to upload Access Logs to SCP server and the following entries are present in Event logs:

2023-06-23 13:26:54+03:00+03  "SSH: No ECDSA host key is known for 10.10.10.10 and you have requested strict checking."  0 45000B:1  sgos_log.cpp:150
2023-06-23 13:26:54+03:00+03  "Access Log (Main): Unable to connect to remote server for log uploading"  0 E0008:1  alog_facility_impl.cpp:2816

Environment

• Edge SWG (ProxySG) is configured to upload Access Logs to remote server using SCP protocol

Cause

SSH key used by remote server is not added to list of Known Hosts on Edge SWG (ProxysSG)

Resolution

Java Management Console

Please navigate to Configuration -> Authentication -> SSH Outbound Connections -> New... and add new Host Key

NOTE: If you do not know what the Host Key is, please use 'Fetch' option:

Edge SWG Management Console

Please navigate to Configuration -> Authentication -> SSH Outbound Access and add now Known Host: