GEN008500-ESXI5-000123 - The system must have IEEE 1394 (Firewire) disabled unless needed - Firewire disabled unless needed

Information

Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

To modify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for IEEE 1394 device connectivity. Disable IEEE 1394.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_ESXi5_Server_V2R1_STIG.zip