USB on ASA

[Ahmad Khalifa]

I Have ASA5515-x and i need to disable all the USB Port is this possible 

[Vibhor Amrodia]

Hi Ahmad,

I don't think this is possible. It is detected automatically when inserted and unmounted automatically when removed.

http://www.cisco.com/c/en/us/td/docs/security/asa/hw/maintenance/5500xguide/5500xhw/asa_overview.html

Thanks and Regards,

Vibhor Amrodia

[Ahmad Khalifa]

is there is any Command to Disable it such Dealing with Cisco Switch "Shutdown" CMD

[Marvin Rhoads]

No, that's not possible in software.

If you order the FIPS kit it will include a set of tamper resistant stickers - you can apply one of those over the physical port to prevent/detect its use.

[Ronit Bhattacharjee]

We requested Cisco to add this feature for FPR1120 running ASA code and it is now available cisco-asa-fp1k.9.22.1.1.SPA and above. Not sue if it is also compatible with older ASA5xxx series firewalls