For Linux sysadmins, it is frequent to access servers by ssh. But are we sure the communication established is really good secured?

There some additionals very simple steps that can be taken to initially harden the SSH SERVICE, such as:

1. Disabling root login, and even password-based logins will further reinforce the security of the server.
2. Disabling password-based logins and allow key based logins which are secured but can be taken further by restricting their USE from only certain IP addresses.
3. Changing the standard port to SOMETHING other significantly decreases random brute FORCE attempts from the internet
4. Forcing the service to use only VERSION 2 of the protocol will introduce both security and feature enhancement.
5. The whitelist approach can be taken, where only the users that belong to a certain list can log in via SSH to the server.

For Linux sysadmins, it is frequent to access servers by ssh. But are we sure the communication established is really good secured?

There some additionals very simple steps that can be taken to initially harden the SSH service, such as: