2022-09-08 13:28:46 +00:00
id : auto-usb-install
info :
name : Auto USB Installation Enabled
author : pussycat0x
severity : info
description : If USB installation is not disabled, an attacker with physical access to a FortiGate could load a new configuration or firmware using the USB port.
reference : https://docs.fortinet.com/document/fortigate/6.2.0/hardening-your-fortigate/582009/system-administrator-best-practices
tags : fortigate,config,audit,firewall
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "set auto-install-config disable"
- "set auto-install-image disable"
negative : true
- type : word
words :
- "config system"
- "config router"
- "config firewall"
condition : or
