2022-09-08 13:28:46 +00:00
id : auto-usb-install
info :
name : Auto USB Installation Enabled
author : pussycat0x
severity : info
description : If USB installation is not disabled, an attacker with physical access to a FortiGate could load a new configuration or firmware using the USB port.
reference : https://docs.fortinet.com/document/fortigate/6.2.0/hardening-your-fortigate/582009/system-administrator-best-practices
2023-04-14 19:41:31 +00:00
tags : audit,config,file,firewall,fortigate
2022-09-08 13:28:46 +00:00
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "set auto-install-config disable"
- "set auto-install-image disable"
negative : true
- type : word
words :
- "config system"
- "config router"
- "config firewall"
condition : or
