Cisco's Open Network Environment TLS port by registration; inside a service mesh it is the sidecar's failure-detection listener.
IANA registered 15002/TCP in January 2014 to Cisco as onep-tls, "Open Network Environment TLS" — the TLS transport for onePK, Cisco's programmability SDK for IOS/IOS-XE, which has since been superseded by NETCONF/RESTCONF and gNMI and is no longer a live product. The UDP side is Reserved. The number's current relevance is Istio, which lists 15002 among its sidecar ports as the "listen port for failure detection" and marks it pod-internal only, sitting in the same 15000-15099 block as the Envoy admin (15000), outbound (15001) and inbound (15006) listeners.
Do not expose
Both readings are internal control paths — a network-device programmability channel or a mesh-internal probe port. Neither should be reachable from outside the pod or the management network.
$ nmap -Pn -sV -p 15002 TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.