{
  "port": 6689,
  "protocol": "tcp",
  "service": "Tofino Security Appliance",
  "oneLiner": "Registered in 2009 for the Tofino industrial security appliance used on SCADA networks.",
  "whatItIs": "IANA lists 6689/tcp and 6689/udp as tsa, \"Tofino Security Appliance\", registered in October 2009. Tofino is an industrial firewall dropped inline in front of PLCs and other control-system gear, and the port carries its management and configuration traffic rather than plant process data. You would only see it inside an operational-technology network, next to the device it protects.",
  "exposure": {
    "verdict": "never",
    "note": "This is the management plane of a control-system firewall. It belongs on an isolated OT management segment with no path from the internet."
  },
  "checkCommand": "nc -vz TARGET 6689",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6689 (tsa)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6689",
      "kind": "iana"
    }
  ]
}