Can USB ports on Smart-1 and Gateway model can be disabled ?

[Bachan]

Hi Team,

We would like to know if USB ports on Smart-1 and Gateways models can be disabled ?

If yes, how can this be achieved ? This is a query from one of our client . I don't find any relevant answers for this in checkpoint document.

Also, please provide any related Checkpoint document mentioning the same.

Regards

Bachan

[G_W_Albrecht]

GAiA will only mount USB media manually, except on Reboot !

[PhoneBoy · Accepted solution]

I imagine the only way to truly disable the USB ports is through appliance BIOS settings, which are not accessible to end users.
TAC may be able to assist here: https://help.checkpoint.com  

The USB ports are how the appliance is reimaged in case the software image becomes corrupt.
In regular Gaia, the only time the USB drive is read is at boot unless an admin accesses Expert mode and manually mounts the USB drive.
On Embedded Gaia platforms, they can also be used to store logs for locally managed appliances.

I would reach out to your Check Point SE with your specific requirements in this area.