{
  "port": 3871,
  "protocol": "tcp",
  "service": "Avocent DS Authorization (ADSAP2)",
  "oneLiner": "The port an Avocent/Vertiv DSView server uses to authorize a KVM session against the appliance the user is connecting to.",
  "whatItIs": "IANA registers 3871 as avocent-adsap, \"Avocent DS Authorization\". In Vertiv's DSView management software the server opens a TCP connection to the managed KVM or serial-console appliance on 3871 to authorize a user's session to a target device; appliances such as the AutoView switches expose it as the ADSAP2 port in their on-board web interface, where it can be turned off. You see it on data-centre KVM-over-IP switches, console servers, and rack appliances.",
  "exposure": {
    "verdict": "never",
    "note": "This is out-of-band infrastructure: the appliances it fronts give console and keyboard access to servers, so both the appliance and 3871 belong on an isolated management network."
  },
  "checkCommand": "nc -vz TARGET 3871",
  "links": [
    {
      "title": "Vertiv Avocent DSView 4.5 — TCP/UDP ports technical note",
      "url": "https://www.vertiv.com/globalassets/products/monitoring-control-and-management/software/avocent-dsview-management-software/vertiv-avocent-dsview-4.5-tcp_udp-ports-tech-note.pdf",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 3871 (avocent-adsap)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=3871",
      "kind": "iana"
    }
  ],
  "ianaName": "avocent-adsap"
}