These newer model DIGI’s (ConnectPort TS16) have 3 ports of concern for the Security team (2 USB in the front, and 1 “console” port in the back).
Can you disable them through configuration?
Unfortunately there is no current way to disable these. There is a change request for product management to address this in the future firmware release. But no date as to when.