List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
sftp11512.2Remote controlBuilt-inAs neededSecure File Transfer Protocol for encrypted file transfers.
ansanotify11612.2Network servicesBuilt-inAs neededA protocol for ANSA Notify, notifying events in ANSA networked systems.
uucp-path11712.2Network servicesBuilt-inAs neededUUCP routing path protocol determines message delivery path through host chains.
sqlserv11812.2Data basesBuilt-inAs neededSQLServ protocol handles Microsoft SQL Server communication over secure channels.
nntp11912.2E-MailBuilt-inAs neededNNTP (Network News Transfer Protocol) enables access to and propagation of Usenet articles.
cfdptkt12012.2Network servicesBuilt-inAs neededA protocol for CFD Ptkt (Control Flow Data Packet), managing control flow packets.
erpc12112.2Remote controlBuilt-inAs neededEmbedded RPC system.
smakynet12212.2Network servicesBuilt-inAs neededSmakynet protocol used in small appliance control and IoT command sync.
ntp12312.2Debugging and measurementBuilt-inAs neededNTP (Network Time Protocol) synchronizes clocks between systems over secure UDP-based communication.
ansatrader12412.2Transactions, banking, tradingBuilt-inAs neededAnsaTrader is a protocol used by electronic trading platforms for secure trade execution and reporting.
locus-map12512.2Network servicesBuilt-inAs neededLocus-Map supports map update and location rendering over secure telemetry links.
nxedit12612.2Network servicesBuilt-inAs neededNxEdit protocol allows secure configuration of distributed control systems in networking equipment.
locus-con12712.2Network servicesBuilt-inAs neededLocus-Con manages encrypted location control and boundary enforcement in GPS systems.
gss-xlicen12812.2Network servicesBuilt-inAs neededA protocol for GSS X License, verifying software licenses over networks.
pwdgen12912.2Network servicesBuilt-inAs neededPassword generator protocol provides on-demand token or secure passphrase delivery.
cisco-fna13012.2Network servicesBuilt-inAs neededA protocol for Cisco FNA (Feature Native Access), accessing native features in Cisco systems.
cisco-tna13112.2Network servicesBuilt-inAs neededA protocol for Cisco TNA (Tag Native Access), accessing native tags in Cisco systems.
cisco-sys13212.2Network servicesBuilt-inAs neededA protocol for Cisco Sys (System), managing Cisco networked systems.
statsrv13312.2Debugging and measurementBuilt-inAs neededStatSrv is a legacy service status and availability monitor protocol.
ingres-net13412.2Network servicesBuilt-inAs neededA protocol for Ingres Net, supporting Ingres networked database systems.