List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
ace-client233412.2Network servicesBuilt-inAs neededA protocol for ACE Client (Access Control Entry), supporting client access.
ace-proxy233512.2Tunneling, secure, ssl, pkiBuilt-inAs neededACE-Proxy supports Application Control Engines in securely forwarding application-layer traffic.
appleugcontrol233612.2Remote controlBuilt-inAs neededApple User Group Control.
ideesrv233712.2Application serversBuilt-inAs neededIDeeSrv is used in digital identity platforms for secure entitlement delivery.
norton-lambert233812.2Network servicesBuilt-inAs neededNorton-Lambert is a proprietary update and license protocol from legacy antivirus tools.
3com-webview233912.2Application serversBuilt-inAs needed3Com-WebView is a management interface protocol used for administering 3Com network devices securely.
wrs_registry234012.2Network servicesBuilt-inAs neededWind River Systems Registry protocol used for service discovery in embedded platforms.
xiostatus234112.2Network servicesBuilt-inAs neededXIO Status protocol handles drive and SAN enclosure telemetry in enterprise storage.
manage-exec234212.2Network servicesBuilt-inAs neededManage-Exec manages remote execution and monitoring commands in enterprise IT systems.
nati-logos234312.2Network servicesBuilt-inAs neededControl protocol for configuration and diagnostic access to LOGOS PLC systems.
fcmsys234412.2Network servicesBuilt-inAs neededA protocol for FCM Sys (Fibre Channel Management System), managing Fibre Channel.
dbm234512.2Data basesBuilt-inAs neededDBM protocol manages secure access to low-level database management functions.
redstorm_join234612.2Application serversBuilt-inAs neededRedStorm_Join is part of the RedStorm security suite used for coordinated endpoint access.
redstorm_find234712.2Application serversBuilt-inAs neededRedStorm-Find is a discovery protocol used in vulnerability scanning and asset identification.
redstorm_info234812.2Application serversBuilt-inAs neededRedStorm_Info protocol distributes threat intelligence updates in secure SOC environments.
redstorm_diag234912.2Application serversBuilt-inAs neededRedStorm_Diag collects diagnostics securely for forensic analysis in security platforms.
psbserver235012.2Application serversBuilt-inAs neededPSBServer is used for broadcast scheduling or playlist management in media infrastructure.
psrserver235112.2Application serversBuilt-inAs neededPSRServer supports policy service routing in enterprise identity or licensing systems.
pslserver235212.2Application serversBuilt-inAs neededPSLServer manages secure printer job spooling and license validation.
pspserver235312.2Application serversBuilt-inAs neededPSPServer handles profile synchronization and secure data archival in user provisioning systems.