List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
ehs453512.2Application serversBuilt-inAs neededEHS (Enterprise Help System) protocol delivers secure, indexed help documentation in enterprise software.
ehs-ssl453612.2Tunneling, secure, ssl, pkiBuilt-inAs neededEHS-SSL is a secure channel for Electronic Health Systems, used in hospital or lab integration platforms.
wssauthsvc453712.2Tunneling, secure, ssl, pkiBuilt-inAs neededWSSAuthSvc is a secure web service authentication protocol for federated environments.
swx-gate453812.2Data transferBuilt-inAs neededSWX-Gate supports secure communication gateways for satellite-based services.
worldscores454512.2Data transferBuilt-inAs neededWorldScores protocol delivers real-time sports data streams with authentication and integrity checks.
sf-lm454612.2Network servicesBuilt-inAs neededLicense management protocol used by Silicon Foundry CAD and EDA tools.
lanner-lm454712.2Network servicesBuilt-inAs neededA protocol for Lanner License Manager, controlling Lanner software licenses.
synchromesh454812.2Network servicesBuilt-inAs neededData synchronization protocol for vehicle telemetry and infotainment systems.
aegate454912.2Network servicesBuilt-inAs neededA protocol for Aegate, a gateway or aggregation network service.
ieee-mih455112.2Network servicesBuilt-inAs neededA protocol for IEEE MIH (Media Independent Handover), managing network handovers.
menandmice-mon455212.2Debugging and measurementBuilt-inAs neededMenAndMice-Mon monitors DNS/DHCP/IP address systems with secure agent telemetry.
icshostsvc455312.2Network servicesBuilt-inAs neededA protocol for ICS Host Service, hosting services in ICS networked systems.
msfrs455412.2Data transferBuilt-inAs neededMSFRS is Microsoft’s protocol for encrypted file replication across distributed systems.
rsip455512.2Voice over IPBuilt-inAs neededReverse IP, used in networking for handling reverse lookups or IP forwarding.
dtn-bundle-tcp455612.2Network servicesBuilt-inAs neededA protocol for DTN Bundle TCP, delivering bundles in delay-tolerant networks via TCP.
dtn-bundle-udp455612.2Network servicesBuilt-inAs neededA protocol for DTN Bundle UDP, delivering bundles in delay-tolerant networks via UDP.
mtcevrunqss455712.2Application serversBuilt-inAs neededMtceVRUNQSS is used in telecom systems for executing remote commands over secure sessions.
mtcevrunqman455812.2Network servicesBuilt-inAs neededRun queue manager for MTC environments handling scheduling telemetry.
hylafax455912.2Data transferBuilt-inAs neededHylaFAX protocol enables encrypted transmission and queuing of faxes over IP networks.
kwtc456612.2Debugging and measurementBuilt-inAs neededKWTC protocol is used in encrypted kiosk-to-backend communication systems.