The system must have USB Mass Storage disabled unless needed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN008480-ESXI5-000122	GEN008480-ESXI5-000122	GEN008480-ESXI5-000122_rule		Low

Description
USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN008480-ESXI5-000122_chk )
To verify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for USB mass storage connectivity. If the system uses USB mass storage, this is not applicable. If the system does not use USB mass storage and USB mass storage connectivity is enabled, this is a finding.

Fix Text (F-GEN008480-ESXI5-000122_fix)
To modify hardware enabled options: Interrupt the host computer's boot process and enter the BIOS menu. Inspect the menu option for USB mass storage connectivity. Disable USB mass storage connectivity.