RCA-2026-03-16-002: Prevention

Lessons Learned

  1. SSH config order matters - First match wins for each option

  2. Exceptions before globals - Device-specific settings must precede Host *

  3. Test with verbose - ssh -vvv shows authentication methods attempted

  4. ISE is special - Closed appliance, password-only SSH