Specifies the global host-key checking policy that determines whether an SSH connection to a client is permitted.
Syntax
ssh client global host-key-check <policy>
no ssh client global host-key-check
Parameters
no
Use the no form of this command to reset the default policy (ask).
policy
The policy:
yes—Strict host key checking, which permits the connection only if a matching host key is already in the global known-hosts configuration file.no—Non-strict host key checking, which always permits the connection and accepts any new or changed host keys without checking.ask—Medium-strict host key checking, which prompts the user to accept new host keys, but does not permit the connection if there is already a known host entry that does not match the one presented by the host.
Example
The following example enables strict host key checking.
hostname (admin) # ssh client global host-key-check yes
User role
Admin
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 7.4.0
Central Management System: Release 7.5.0
Email Security — Server: Release 7.1.0
File Protect: Release 7.5.0
Endpoint Security (HX): Release 2.5.0
Network Security: Release 7.5.0
Intelligent Virtual Execution - Server: Release 7.9.0