The system must have USB disabled unless needed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN008460-ESXI5-000121	GEN008460-ESXI5-000121	GEN008460-ESXI5-000121_rule		Low

Description
USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN008460-ESXI5-000121_chk )
To verify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for USB device connectivity. If the system uses USB, this is not applicable. If the system does not use USB and USB is enabled, this is a finding.

Fix Text (F-GEN008460-ESXI5-000121_fix)
To modify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for USB device connectivity. Disable USB.