Disable USB and Bluetooth on Device

MediumLevel 2Automatedaruba-cx

Description

Disable USB Auxiliary port PASS requires 'no usb' and 'bluetooth disable'. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

How it is checked

Audit method: Configuration pattern

Pattern: (?m)(?:^no usb[ \t]*$(?s:.*?)^bluetooth disable[ \t]*$|^bluetooth disable[ \t]*$(?s:.*?)^no usb[ \t]*$)

How it is fixed

Fix method: Guidance or infrastructure patch

no usb bluetooth disable # CIS guidance: no usb bluetooth disable

Properties

Operating systems: Any
Tags: aruba-cxhardening
Reference: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 2.1.1 Disable USB and Bluetooth on Device

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aruba-cx --level 2