{
  "port": 7025,
  "protocol": "both",
  "service": "Vormetric Service II (vmsvc-2)",
  "oneLiner": "The second Vormetric agent port on paper; in mail environments, Zimbra's LMTP listener in practice.",
  "whatItIs": "IANA registers 7025 as vmsvc-2, \"Vormetric Service II\", from the same 2005 assignment as 7024, serving the same agent-to-Data-Security-Manager role in what is now the Thales CipherTrust line. The other common occupant is Zimbra Collaboration, whose mailbox server accepts LMTP delivery from its MTA on 7025 (zimbraLmtpBindPort) — so on a mail host, 7025 open next to 25 and 7071 means Zimbra, not Vormetric. Neither service belongs on a public interface.",
  "exposure": {
    "verdict": "never",
    "note": "LMTP has no authentication and accepts mail for local delivery; the Vormetric reading is a key-management channel. Either way this is an internal-only port."
  },
  "checkCommand": "nc -vz TARGET 7025",
  "links": [
    {
      "title": "Thales — Vormetric Data Security Platform",
      "url": "https://cpl.thalesgroup.com/encryption/vormetric-data-security-platform",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7025",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7025",
      "kind": "iana"
    }
  ]
}