{
  "port": 1761,
  "protocol": "tcp",
  "service": "Novell ZENworks Remote Management agent (cft-0)",
  "oneLiner": "The ZENworks remote-control agent — an administrator taking over a desktop.",
  "whatItIs": "IANA registers 1761 as \"cft-0\", Sopra's Cross File Transfer, but the port is known in the field for Novell ZENworks: the Remote Management Agent binds TCP 1761 by default so a ConsoleOne operator can view or drive the user's desktop, with the listener on the console side using 1762. The port is configurable through `rmcfg.ini`, but almost nobody changes it. Current ZENworks releases have moved remote management elsewhere and now list 1761 only as a UDP port for forwarding Wake-on-LAN magic packets, so an open TCP 1761 points at a legacy ZENworks Desktop Management estate.",
  "exposure": {
    "verdict": "never",
    "note": "This is a remote desktop control channel on end-user machines, served by an agent from a product generation that no longer gets fixes — keep it on the management network only."
  },
  "checkCommand": "nc -vz -w 3 TARGET 1761",
  "links": [
    {
      "title": "Novell ZENworks 6.5 — Configuring Remote Management Ports (agent default TCP 1761)",
      "url": "https://www.novell.com/documentation/zenworks65/dmadmin/data/brhfsgh.html",
      "kind": "official-docs"
    },
    {
      "title": "ZENworks 24.4 — TCP and UDP Ports",
      "url": "https://www.novell.com/documentation/zenworks-24.4/zen_ports/data/zen_ports.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 1761 (registered as cft-0)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1761",
      "kind": "iana"
    }
  ]
}