{
  "port": 6500,
  "protocol": "tcp",
  "service": "BoKS Master",
  "oneLiner": "The master daemon of BoKS, the Unix access-control product — and the base of its four-port block.",
  "whatItIs": "IANA registers 6500 as boks, \"BoKS Master\", for the access-control and privileged-access product originally from Fox Technologies (now Fortra). 6500 is the configurable base port: the master daemon listens here to maintain the master database and drive replication to replica servers, with the following ports in the block carrying the other daemons. Every BoKS server agent in a domain must use the same base port, so where you find one you find the whole 6500-6503 cluster. A listener means a host inside a centrally managed Unix authentication domain.",
  "exposure": {
    "verdict": "never",
    "note": "This is the control plane for who may log in to every managed Unix host; it belongs on a management network reachable only by BoKS masters, replicas, and agents."
  },
  "checkCommand": "sudo lsof -nP -iTCP:6500 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6500 (boks)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6500",
      "kind": "iana"
    }
  ]
}