{
  "port": 1056,
  "protocol": "both",
  "service": "VFO",
  "oneLiner": "Registered as \"VFO\" with no public spec; in practice most often ANSYS's vendor daemon parked next to 1055.",
  "whatItIs": "IANA lists 1056 as `vfo`, \"VFO\", a vendor registration with no surviving public documentation. What you actually meet on 1056 is usually unrelated to that name: ANSYS administrators conventionally pin the `ansyslmd` vendor daemon to 1056 with `PORT=1056` on the VENDOR line so it sits beside the lmgrd port on 1055, and ANSYS firewall guidance routinely names 1055, 1056, and 2325 together. So an open 1056 next to an open 1055 is a FlexNet license server, not a VFO service.",
  "exposure": {
    "verdict": "never",
    "note": "When it is the ANSYS vendor daemon, it inherits FlexNet's no-authentication model — internal network only. When it is something unidentified, fingerprint it before exposing anything."
  },
  "checkCommand": "nmap -Pn -sV -p 1055-1056 TARGET",
  "links": [
    {
      "title": "ANSYS Licensing Guide — Understanding Port Numbers",
      "url": "https://ansyshelp.ansys.com/public/Views/Secured/corp/v242/en/ai_elg/aiELG_portnums.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
