List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
bootps/dhcp6712.2Network servicesBuilt-inAs neededA protocol for BOOTP Server/DHCP, assigning IP addresses dynamically.
bootpc6812.2Network servicesBuilt-inAs neededA protocol for BOOTP Client, requesting IP addresses in networks.
tftp6912.2Data transferBuilt-inAs neededTFTP (Trivial File Transfer Protocol) is a lightweight, unencrypted protocol for transferring files over LAN.
gopher7012.2Data transferBuilt-inAs neededGopher is a pre-HTTP document retrieval protocol supporting structured navigation over TCP.
netrjs-17112.2Remote controlBuilt-inAs neededRemote job submission protocol.
netrjs-27212.2Remote controlBuilt-inAs neededAnother variant of remote job submission.
netrjs-37312.2Remote controlBuilt-inAs neededVariant of remote job submission.
netrjs-47412.2Remote controlBuilt-inAs neededAnother remote job submission protocol.
deos7612.2Data basesBuilt-inAs neededDEOS is a deterministic OS protocol that can synchronize secure DB activity in avionics or robotics.
vettcp7812.2Network servicesBuilt-inAs neededVetTCP protocol validates TCP traffic integrity in custom firewalls or IPS systems.
finger7912.2Network servicesBuilt-inAs neededA protocol for Finger, a user information lookup service over networks.
xfer8212.2Debugging and measurementBuilt-inAs neededXFER is a generic label used for data transfer operations, typically in backup, replication, or FTP-like scenarios. It often appears in legacy systems to denote a file or block transmission routine.
mit-ml-dev8312.2Network servicesBuilt-inAs neededMIT-ML-Dev is a secure messaging protocol for machine learning experimentation platforms.
ctf8412.2Network servicesBuilt-inAs neededA protocol for CTF (Common Trace Facility), tracing data in networks.
mfcobol8612.2Network servicesBuilt-inAs neededMFCobol provides COBOL-based license control and telemetry for secure business logic apps.
kerberos8812.2Data transferBuilt-inAs neededKerberos is a network authentication protocol using encrypted tickets to verify identity.
su-mit-tg8912.2Remote controlBuilt-inAs neededSU/MIT Telnet Gateway (IANA official)
dnsix9012.2Network servicesBuilt-inAs neededDepartment of Defense DNSIX protocol used for secure audit, identification, and authentication telemetry.
mit-dov9112.2Network servicesBuilt-inAs neededMIT-DOV manages secure digital overlays in academic or simulation tools.
npp9212.2PrintingBuilt-inAs needed"Network Print Protocol" used in managing print jobs or communications with networked printers.