{
  "port": 1078,
  "protocol": "tcp",
  "service": "Avocent Proxy Protocol",
  "oneLiner": "An Avocent/Vertiv KVM proxy — remote console sessions to serial, KVM, and service-processor targets tunnel through here.",
  "whatItIs": "Avocent (now Vertiv) registered 1078 for its proxy protocol, and DSView management software uses it to tunnel KVM video, serial, and service-processor sessions between clients and appliances so that clients never need a direct route to the managed hardware. Finding it open means a DSView server or an Avocent appliance is on the network, sitting in front of the out-of-band consoles of everything it manages. The port is configurable but is left at 1078 in most installs.",
  "exposure": {
    "verdict": "never",
    "note": "This is the front door to out-of-band console access for a whole rack estate. Keep it on the management network and reach it over a VPN, not from the internet."
  },
  "checkCommand": "nc -vz -w 3 TARGET 1078",
  "links": [
    {
      "title": "IANA port registry — 1078 (avocent-proxy)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1078",
      "kind": "iana"
    },
    {
      "title": "Vertiv — Avocent DSView 4.5 TCP/UDP ports technical note",
      "url": "https://www.vertiv.com/globalassets/products/monitoring-control-and-management/software/avocent-dsview-management-software/vertiv-avocent-dsview-4.5-tcp_udp-ports-tech-note.pdf",
      "kind": "official-docs"
    }
  ]
}