{
  "port": 1500,
  "protocol": "tcp",
  "service": "IBM Storage Protect (Tivoli Storage Manager) server",
  "oneLiner": "Where the IBM Storage Protect backup server listens for client sessions — registered to a different product entirely.",
  "whatItIs": "IBM Storage Protect, formerly Tivoli Storage Manager and Spectrum Protect, sets its TCPPORT server option to 1500 by default; that is the port the server's TCP/IP driver waits on for backup and archive client sessions. The IANA registration for 1500 is the unrelated vlsi-lm (\"VLSI License Manager\"), so in practice a listener here in an enterprise environment is a backup server, not a licence daemon. Nearby ports follow from it: the default DBMTCPPORT becomes 51500 when TCPPORT is 1500.",
  "exposure": {
    "verdict": "never",
    "note": "A backup server holds every file the estate has ever backed up; keep it on the internal backup network and let only registered clients reach it."
  },
  "checkCommand": "nc -vz TARGET 1500",
  "links": [
    {
      "title": "IBM Storage Protect — TCPPORT server option (default 1500)",
      "url": "https://www.ibm.com/docs/en/storage-protect/8.1.21?topic=options-tcpport",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
