You can disable port 22 and the USB ports on the automation server.
Port 22 is used for communication with Device Administrator. This port is often the target for cyber-attacks. You can disable this port or change the port so that the automation server communicates on another port using SSH. You can also disable all SSH communication.
Mer information finns i Disabling Port 22 on an Automation Server .
Mer information finns i Adding an Additional SSH Port for an automation Server .
To prevent anyone from tampering with your automation servers on site you can disable the USB ports.
The USB ports can be disabled on both the AS-B and AS-P servers but not on the automation server AS. The setting is visible on the automation server AS but grayed out and cannot be changed.
Mer information finns i Disabling the USB Port on an Automation Server .