LLDP Security Concern on FortiSwitch Ports?

[tanr]

Hi All,

I'm managing a few FortiSwitches from our FortiGates and have worked to lock them down.

One thing I haven't done yet is to turn off LLDP on the edge ports.  

What do you all think?

Is turning off LLDP on the edge ports a useful security method? 

Will it cause me problems later?

If I set lldp-status rx-only (instead of disable) will that still allow device identification?

Thanks for your thoughts on this.