You can disable port 22 and the USB ports on the automation server.
Port 22 is used for communication with Device Administrator. This port is often the target for cyber-attacks. You can disable this port or change the port so that the automation server communicates on another port using SSH. You can also disable all SSH communication.
For more information, see Disabling Port 22 on an Automation Server .
For more information, see Adding an Additional SSH Port for an automation Server .
To prevent anyone from tampering with your automation servers on site you can disable the USB ports.
The USB ports can be disabled on both the AS-B and AS-P servers but not on the automation server AS. The setting is visible on the automation server AS but grayed out and cannot be changed.
For more information, see Disabling the USB Port on an Automation Server .