STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must be configured to disable the auxiliary USB port.

DISA Rule

SV-271972r1114185_rule

Vulnerability Number

V-271972

Group Title

SRG-APP-000142-NDM-000245

Rule Version

CACI-ND-000057

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Disable the USB port on all switches within the Cisco ACI fabric:
1. Navigate to Fabric >> Access Policies >> Policies >> Switch >> USB Configuration >> default.
2. Check the "Disable USB Port" box; this will disable the USB port on all switches within the Cisco ACI fabric.

Check Contents

Verify the USB port is disabled:
1. Navigate to Fabric >> Access Policies >> Policies >> Switch >> USB Configuration >> default.
2. Verify the "Disable USB Port" box is checked.

If the USB port is not disabled, this is a finding.

Vulnerability Number

V-271972

Documentable

False

Rule Version

CACI-ND-000057

Severity Override Guidance

Verify the USB port is disabled:
1. Navigate to Fabric >> Access Policies >> Policies >> Switch >> USB Configuration >> default.
2. Verify the "Disable USB Port" box is checked.

If the USB port is not disabled, this is a finding.

Check Content Reference

M

Target Key

5682