Wednesday, August 27, 2025

Pragma SSH ClientSuite winning large US Govt and DoD deals - learn why

 

Pragma has won many SSH ClientSuite deals in the recent years for US Dept of State, Dept of Commerce, IRS and DoD. Some of the key reasons are its FIPS 140-2 compliance (soon to have FIPS 140-3), Microsoft CNG use speed, full RFC 6187 support and Cisco recommendations.


Pragma Fortress SSH ClientSuite allows FIPS 2-Factor X.509 v3 CAC/PIV card SSH login to Cisco network devices. RFC 6187 defines how X.509 Certificates are to be laid out by SSH clients and servers, which SSH specification lacked. Cisco implemented RFC 6187 spec in it's SSH servers (IOS, IOS/XE) and chose Pragma as it's SSH client side development partner. Pragma implemented RFC 6187 in its entire SSH client suites (ssh, sftp, scp) and SSH servers. Cisco interoperability tests were successful and Cisco recommended Pragma SSH client for CAC/PIV SSH access to network devices. A joint white paper was published by Cisco Cisco Pragma white paper to show how to configure Cisco devices and Pragma SSH Client. AES GCM ciphers and ECDSA/NISPT/RSA keys, certificates & authentications are all supported per RFC 6187 spec.