Details

The switch includes a USB port to receive a flash drive for deploying, troubleshooting, backing up configurations, or updating switches. This port should be disabled when not in use, and only temporarily enabled when needed.

Solution

To enable the USB port, use the following command in the configuration context:

switch# usb

To disable the port:

switch# no usb

Supportive Information

The following resource is also helpful.

• https://support.hpe.com/hpesc/public/docDisplay?docId=a00053695en_us

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system ArubaOS.

References

• 800-53|SC-7(14)

Source

• Tenable.com/audits