What is the effect of disabling ssh?

[BeNatural]

I'm trying to determine what the effect of disabling ssh might be for managed computers. At the moment, all I can see is that Recon and Casper Remote won't work. Recon isn't a big problem, since ssh would be disabled after enrolment and deployment are complete.

Is ssh used by JSS or other components?

Would any other functionality be affected?

[chriscollins · Accepted solution]

Only those two applications would be affected yes.

Everything else runs through the jamf binary and talks to the JSS over https.

[BeNatural]

I've taken the plunge and tested this on some computers, and so far it seems that it works ok. Policies etc work ok, but Casper Remote doesn't. Fun thing is that you can enable/disable/configure ssh with a policy anyway.

[tvieson]

Disabling SSH in my environment presented the following issues:

• Qualys vulnerabilities scans return limited results
• McAfee ePO remote commands (install agent, refresh policy, etc) do not work