[Proftpd-user] Security with SFTP

We run regular security scans through Digital Defense and they are 
reporting that our proftpd is running RC4, Weak MAC Algorithms, and CBC 
Mode Ciphers. I want to fix the issue but still have a high level of 
usability. I tried a setting like this:

SFTPCiphers aes256-ctr aes192-ctr aes128-ctr
SFTPDigests hmac-sha2-256 hmac-sha2-512 hmac-ripemd160 
[email protected]

and about 10% of my users were not able to login anymore. Is there a way 
like in Apache to say minus certain things rather then list what is 
accepted? Here are my specs:

RHEL 7
Proftpd Version: 1.3.5e
OpenSSL openssl-1.0.2k-12.

Or is there a document that gives the proper way to customize the 
parameters for these setting?

Thanks

_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html