2.1.7 Disable USB Firmware and configuration installation - auto-install-config

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Disable USB port auto install feature for config and firmware

Rationale:

Disabling USB port for auto install prevents a USB from being connected with a manipulated configuration or incorrect firmware from being connected and loaded automatically.

Solution

CLI:

config system auto-install
set auto-install-config disable
set auto-install-image disable
end

Default Value:

config system auto-install set auto-install-config enable set auto-install-image enable end

See Also

https://workbench.cisecurity.org/files/4077