topic Re: Disable USB Port -1450 GW in Spark Firewall (SMB)

Disable USB Port -1450 GW

CP_SA — Mon, 30 Apr 2018 04:02:52 GMT

Good Evening -

Would someone be kind enough to share how I might disable the USB port on my 1450 gateways?!

I am configuring a large number of 1450's and I am upgrading firmware via USB, but after I verify installation want to disable the port. These gateways are being deployed in relatively physically secure locations (albeit remote), but there is nothing to stop someone from connecting a USB, pulling the power cord, and voila. In a situation where a local USB upload is required I want to control its enabling/disabling (like any unused port) *I find it a little strange that they just auto-load out of the box without any prompt.

Thanks!

Re: Disable USB Port -1450 GW

PhoneBoy — Mon, 30 Apr 2018 04:18:33 GMT

As far as I know, there is no way to disable the USB ports.

That said, if someone unauthorized has physical access to the box, there are other things they can do (e.g. use the factory reset pin, replace the box with something else).

Re: Disable USB Port -1450 GW

G_W_Albrecht — Wed, 02 May 2018 08:47:09 GMT

As Dameon has already pointed out, physical access to the box including serial connection is dangerous, even with disabled USB ports. But i see the possibility to achieve the goal by renaiming the USB-specific hotplug policy agent (/pfrm2.0/etc/hotplug/usb_device.agent) that will mount USB media when inserted. But any Reset To Factory Defaut Firmware will overwrite this change...

Re: Disable USB Port -1450 GW

PhoneBoy — Wed, 02 May 2018 17:36:01 GMT

My guess is that will not solve the issue.

This is because flashing is done in the bootloader

Re: Disable USB Port -1450 GW

G_W_Albrecht — Thu, 03 May 2018 10:59:26 GMT

Could well be so - it does not make much sense anyway...

Re: Disable USB Port -1450 GW

CP_SA — Mon, 14 May 2018 15:14:33 GMT

Thank you for the ideas. Since these gateways will be in relatively secure locations, and monitored 24/7, I think I will dedicate my limited brain cycles to my next set of problems!

Re: Disable USB Port -1450 GW

abzheee — Sat, 23 Mar 2024 15:04:50 GMT

A lot of things might be plugged in USB to monitor port and presence of something in that port.

I saw a security device once. From a major EU vendor: they write remote administration password to the removable storage in plain. And they ok with that. Everyone ok with that. La tradicion.

Re: Disable USB Port -1450 GW

G_W_Albrecht — Mon, 25 Mar 2024 08:58:10 GMT

An unnecessary comment to a post 6 years old?