List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
ah-esp-encap207012.2Network servicesBuilt-inAs neededA protocol for AH ESP Encapsulation, securing data with Authentication Header ESP.
acp-port207112.2Network servicesBuilt-inAs neededA protocol for ACP Port (Access Control Port), controlling access in networks.
msync207212.2Network servicesBuilt-inAs neededMSync protocol synchronizes local cache and metadata with master repositories.
gxs-data-port207312.2Network servicesBuilt-inAs neededA protocol for GXS Data Port, exchanging data in GXS network services.
vrtl-vmf-sa207412.2Network servicesBuilt-inAs neededVMF Service Agent channel handles orchestration messages in virtual machine clusters.
newlixengine207512.2Network servicesBuilt-inAs neededNewlixEngine runs core service orchestration and telemetry on Newlix appliances.
newlixconfig207612.2Network servicesBuilt-inAs neededNewlixConfig handles encrypted configuration management for Newlix Linux appliances.
tsrmagt207712.2Network servicesBuilt-inAs neededRemote Agent protocol for TSR management system telemetry and updates.
tpcsrvr207812.2Network servicesBuilt-inAs neededTPCSrvr handles printer configuration sync and control in enterprise printing.
idware-router207912.2Network servicesBuilt-inAs neededA protocol for IDWare Router, routing data in IDWare networked systems.
autodesk-nlm208012.2Network servicesBuilt-inAs neededAutodesk Network License Manager syncs license entitlements and seat telemetry.
kme-trap-port208112.2Network servicesBuilt-inAs neededA protocol for KME Trap Port, trapping data for KME networked systems.
infowave208212.2Network servicesBuilt-inAs neededA protocol for InfoWave, managing information waves in networked systems.
radsec208312.2Network servicesBuilt-inAs neededSecure RADIUS protocol transports authentication and accounting messages over TLS.
sunclustergeo208412.2Network servicesBuilt-inAs neededSynchronizes data and failover state in SunCluster Geo clustered services.
ada-cip208512.2Network servicesBuilt-inAs neededA protocol for ADA CIP (Control and Information Protocol), managing control data.
gnunet208612.2Network servicesBuilt-inAs neededA protocol for GNUnet, a decentralized peer-to-peer networking framework for secure communication.
eli208712.2Network servicesBuilt-inAs neededA protocol for ELI (Event Logging Integration), logging network events.
ip-blf208812.2Network servicesBuilt-inAs neededA protocol for IP BLF (Busy Lamp Field), managing IP telephony presence.
sep208912.2Network servicesBuilt-inAs neededSymantec Endpoint Protection protocol syncs telemetry and policy enforcement actions.