To keep your site secure, it is important to find out who is using weak or outdated encryption. If you've enabled insecure ciphers for SFTP connections, some users may connect with old settings that are not safe.

Your site includes reports that list which ciphers are being used by your users. You can use the reports to see which ciphers they are using. This will help you to plan for updating any affected users' connections to stronger and safer options so that you can safely disable the insecure ciphers for your site.

Web Interface

There are 2 data exports available to show you who is connecting with insecure ciphers.

To view which ciphers a specific user is connecting with, access their user record within the web interface. In the Connections tab, a listing of Protocols & Ciphers shows all of the ways they have connected, including whether it was secure and when they last used it. You can filter the listing and export this data.

For an overall view of all the users who are connecting with insecure ciphers, review the Users Using Insecure Ciphers listing. This will show every user who has connected using an insecure cipher. The listing includes when each user most recently connected with each cipher. This makes it easy to track the progress of updating all of your affected users.

Programmatic

You can use the Files.com Command Line App (CLI) or any of the official Files.com SDKs to generate a report of your users that are connecting with insecure ciphers.