List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
sse-app-config385212.2Application serversBuilt-inAs neededSSE-App-Config is used in secure software supply chain tools for managing app configuration state.
sscan385312.2Network servicesBuilt-inAs neededSystem Scanner protocol aggregates hardware/software inventory from networked nodes.
stryker-com385412.2Network servicesBuilt-inAs neededTelemetry protocol for Stryker medical devices enabling secure monitoring and updates.
opentrac385512.2Network servicesBuilt-inAs neededOpenTrac protocol supports open tracking metadata exchange in logistics and transport.
informer385612.2Network servicesBuilt-inAs neededA protocol for Informer, informing users or systems in networked environments.
trap-port385712.2Network servicesBuilt-inAs neededStandard SNMP trap listener port for receiving alerts from monitored systems.
trap-port-mom385812.2Tunneling, secure, ssl, pkiBuilt-inAs neededTrap-Port-MOM is used in secure SNMP or event traps forwarding in message-oriented middleware.
nav-port385912.2Tunneling, secure, ssl, pkiBuilt-inAs neededNAV-Port is a secure port used by navigation systems for encrypted map and positioning data transfers.
sasp386012.2Data transferBuilt-inAs neededSASP (Secure Authenticated Session Protocol) provides token and ticket-based access in financial platforms.
winshadow-hd386112.2Network servicesBuilt-inAs neededHigh-definition variant of WinShadow for enhanced graphical session streaming.
giga-pocket386212.2Data transferBuilt-inAs neededGigaPocket protocol is used by Sony media systems for encrypted TV recording and playback control.
asap-sctp386312.2Debugging and measurementBuilt-inAs neededASAP-SCTP is a transport protocol supporting failover for Application Server Access over SCTP.
asap-tcp386312.2Network servicesBuilt-inAs neededA protocol for ASAP over TCP, providing asynchronous service access.
asap-udp386312.2Data transferBuilt-inAs neededASAP-UDP is an alternative transport for ASAP (Aggregate Server Access Protocol), ensuring fast failover.
asap-sctp-tls386412.2Network servicesBuilt-inAs neededA protocol for ASAP over SCTP with TLS, adding secure transport to asynchronous services.
asap-tcp-tls386412.2Application serversBuilt-inAs neededASAP-TCP-TLS is a secure protocol for real-time distributed application messaging.
xpl386512.2Network servicesBuilt-inAs neededXPL protocol supports messaging between smart home devices and automation controllers.
dzdaemon386612.2Tunneling, secure, ssl, pkiBuilt-inAs neededDZDaemon is used in dynamic zoning and security enforcement across SAN networks.
dzoglserver386712.2Data transferBuilt-inAs neededDZoglServer protocol supports remote OpenGL rendering in scientific visualization tools.
diameter386812.2Network servicesBuilt-inAs neededA protocol for Diameter, an authentication, authorization, and accounting protocol.