topic How to disable usb port on ASA 5525-X in Network Security

How to disable usb port on ASA 5525-X

h.dam — Fri, 21 Feb 2020 15:51:22 GMT

Hi everyone,

I would like to disable the usb port on the firewall in order to block physical access. But I didn't find the CLI command (ASA v9.8.1)

Having tried to search in this forum, people said it is impossible to do.

Did someone succeed to do it?

Thanks.

Regards.

Re: How to disable usb port on ASA 5525-X

Dennis Mink — Thu, 07 Jun 2018 11:32:34 GMT

hw-module usb disable try that

Re: How to disable usb port on ASA 5525-X

h.dam — Thu, 07 Jun 2018 11:39:45 GMT

I've already tried this.

This command is not recognized.

Regards.

Re: How to disable usb port on ASA 5525-X

h.dam — Fri, 15 Jun 2018 13:39:38 GMT

I have inserted a usb key with FAT format on one usb port (below the mngt port), nothing happened.

When I run the command DIR, I saw only disk0.

Re: How to disable usb port on ASA 5525-X

Florin Barhala — Fri, 15 Jun 2018 19:51:57 GMT

Can you state here your HW and SW version pleasE?
Also you want to enable or disable USB port?

Re: How to disable usb port on ASA 5525-X

h.dam — Sat, 16 Jun 2018 15:55:56 GMT

Hi Florin,

The firewall is ASA 5525-X with v9.8(1).

I'd like to disable the usb key as said on the title.

But I cannot disable it if I don't see disk1.

Regards.

Re: How to disable usb port on ASA 5525-X

Marvin Rhoads — Sun, 17 Jun 2018 05:35:02 GMT

By default the "dir" command will only show you disk0 (internal compact flash card).

If a FAT-formatted USB storage device is connected to the external USB port, you should be able to see its contents with "dir disk1:"

You cannot disable the ASA USB port in software. If you order the FIPS kit it will include a set of tamper resistant stickers - you can apply one of those over the physical port to prevent/detect its use. You can also disable access to it it physically - I have seen epoxy used to fill the port in high security environments!

Re: How to disable usb port on ASA 5525-X

h.dam — Mon, 18 Jun 2018 10:02:53 GMT

Thank you for your response.

I don't know what are the uses of these usb ports designed originally.

Especially on a security appliance where physical access is not permitted in most cases.

So I have to put sticker on it. Sorry that I have no other choice.

Re: How to disable usb port on ASA 5525-X

Ronit Bhattacharjee — Fri, 04 Oct 2024 05:45:13 GMT

We requested Cisco to add this feature for FPR1120 running ASA code and it is now available cisco-asa-fp1k.9.22.1.1.SPA and above. Not sue if it is also compatible with older ASA5xxx series firewalls