topic Re: Can USB ports on Smart-1 and Gateway model can be disabled ? in General Topics

Can USB ports on Smart-1 and Gateway model can be disabled ?

Bachan — Wed, 14 Jun 2023 10:42:44 GMT

Hi Team,

We would like to know if USB ports on Smart-1 and Gateways models can be disabled ?

If yes, how can this be achieved ? This is a query from one of our client . I don't find any relevant answers for this in checkpoint document.

Also, please provide any related Checkpoint document mentioning the same.

Regards

Bachan

Re: Can USB ports on Smart-1 and Gateway model can be disabled ?

G_W_Albrecht — Wed, 14 Jun 2023 12:55:44 GMT

GAiA will only mount USB media manually, except on Reboot !

Re: Can USB ports on Smart-1 and Gateway model can be disabled ?

PhoneBoy — Wed, 14 Jun 2023 14:59:01 GMT

I imagine the only way to truly disable the USB ports is through appliance BIOS settings, which are not accessible to end users.
TAC may be able to assist here: https://help.checkpoint.com

The USB ports are how the appliance is reimaged in case the software image becomes corrupt.
In regular Gaia, the only time the USB drive is read is at boot unless an admin accesses Expert mode and manually mounts the USB drive.
On Embedded Gaia platforms, they can also be used to store logs for locally managed appliances.

I would reach out to your Check Point SE with your specific requirements in this area.