ISE backup to SFTP (SSHv2) - according to documentation ISE 2.1 does not support AES-CTR and just -CBC.. can someone confirm this and are there any plans to support -CTR if it is not supported today

[Erik Erasmus]

AS far as I can see ISE 2.1 only supports AES 128 CBC and not CTR cipher..

Is this correct ? Are there any plans to support -CTR cipher in future ?

application is backup to SFTP server and customer can only support -CTR

[hslai · Accepted solution]

You are correct. There exists CSCux88538 - ISE 1.4 support for aes256-ctr & aes128-ctr for SSH

Apparently, CTR ciphers are not in the approved list for Common Criteria or at least in 2015. If you have a good business case, please bring it up with our product management team.