Can USB mass storage be disabled?

[jefazo92]

Hi everyone,

Is it possible to disable USB mass storage in a Fortigate? Or as an extrememeasure disable the USB port completely? 

[fricci_FTNT]

Hi @jefazo92 ,

You can disable auto installation:

config system auto-install
set auto-install-config disable
set auto-install-image disable
end

https://docs.fortinet.com/document/fortigate/6.4.0/hardening-your-fortigate/159005/disable-auto-usb-...

Anyway you cannot prevent someone to physically plugin a USB stick into your FortiGate unless it is securely locked in.

Best regards,

[AEK]

Can also do it from GUI. Menu: System > Settings