{
  "port": 9535,
  "protocol": "both",
  "service": "mngsuite — Management Suite Remote Control",
  "oneLiner": "Registered to LANDesk (now Ivanti) Management Suite for remote control of managed desktops.",
  "whatItIs": "IANA registered 9535 as `mngsuite`, \"Management Suite Remote Control\", in 2010 on behalf of LANDesk. It belongs to the endpoint-management agent that ships with LANDesk / Ivanti Endpoint Manager, alongside the agent's other ports in the 9593-9595 range. Nmap's service table still calls it `man`, an older name for the same listener. On a scan it means a managed Windows desktop or server with the vendor agent installed, not a general-purpose service you can talk to.",
  "exposure": {
    "verdict": "never",
    "note": "This is a remote-control plane for whole workstations. It belongs on a management VLAN reachable only from the management server, never on a public interface."
  },
  "checkCommand": "sudo lsof -nP -iTCP:9535 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}