{
  "port": 5718,
  "protocol": "tcp",
  "service": "Microsoft DPM (backup agent channel)",
  "oneLiner": "System Center Data Protection Manager talking to the backup agents on the machines it protects.",
  "whatItIs": "IANA registers 5718 as dpm, \"DPM Communication Server\", for Microsoft System Center Data Protection Manager. Microsoft's firewall guidance pairs it with 5719: DPM communicates with the agent coordinator on 5718 and with the protection agent on 5719, and both ends open connections so that synchronization and recovery can run in either direction. You see it only inside a Windows domain running SCDPM — on the DPM server itself and on every protected file server, SQL host, or Hyper-V host.",
  "exposure": {
    "verdict": "never",
    "note": "This is the control channel for a backup system that can read and restore everything on the protected hosts. It belongs entirely inside the domain, never across a perimeter."
  },
  "checkCommand": "nc -vz -w 3 TARGET 5718",
  "links": [
    {
      "title": "Microsoft — Configuring Firewalls for DPM (5718/5719 data channel)",
      "url": "https://learn.microsoft.com/en-us/previous-versions/system-center/data-protection-manager-2010/ff399341(v=technet.10)",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 5718 (dpm)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=5718",
      "kind": "iana"
    }
  ]
}