{
  "port": 2383,
  "protocol": "tcp",
  "service": "SQL Server Analysis Services",
  "oneLiner": "The default instance of SQL Server Analysis Services — the OLAP/tabular engine behind Excel and Power BI cubes.",
  "whatItIs": "Microsoft documents TCP 2383 as the port a default SQL Server Analysis Services instance listens on, and the port a failover-clustered instance always uses regardless of naming. Named instances take a dynamic port instead and rely on SQL Server Browser on TCP 2382 to redirect clients. The listening port comes from the Port setting in msmdsrv.ini (0 means \"use 2383 or a dynamic port\"), and SSAS uses TCP only — no UDP. On a scan it marks a BI server holding aggregated business data.",
  "exposure": {
    "verdict": "never",
    "note": "An analytical database engine with its own security model and no reason to face the internet — keep it behind the firewall and reach it over a VPN or a gateway service."
  },
  "checkCommand": "nc -vz TARGET 2383",
  "links": [
    {
      "title": "Microsoft Learn — Configure the Windows Firewall to Allow Analysis Services Access",
      "url": "https://learn.microsoft.com/en-us/analysis-services/instances/configure-the-windows-firewall-to-allow-analysis-services-access",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2383 (ms-olap4)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2383",
      "kind": "iana"
    }
  ],
  "ianaName": "ms-olap4"
}