List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
winfs500912.2Data transferBuilt-inAs neededWinFS (Windows Future Storage) protocol supports secure relational metadata handling in file systems.
telelpathstart501012.2Video, picturesBuilt-inAs neededTelelpathStart initializes secure IPTV or OTT tunnels for media session start-up.
telelpathattack501112.2Tunneling, secure, ssl, pkiBuilt-inAs neededTelelpathAttack is a diagnostic or emulation protocol used in penetration testing of tunneled environments.
nsp501212.2Network servicesBuilt-inAs neededNSP (Network Services Protocol) handles secure routing and service control in network overlays.
fmpro-v6501312.2Data transferBuilt-inAs neededFMPro-V6 provides client-server sync in FileMaker Pro v6 with encryption support.
onpsocket501412.2Network servicesBuilt-inAs neededONPSocket enables encrypted session management for distributed optimization engines.
fmwp501512.2Data transferBuilt-inAs neededFMWP is used in legacy fax management or document transport systems with basic encryption.
zenginkyo-1502012.2Transactions, banking, tradingBuilt-inAs neededZenginkyo-1 is a Japanese interbank protocol used for clearing and settlement.
zenginkyo-2502112.2Transactions, banking, tradingBuilt-inAs neededZenginkyo-2 is a secondary Japanese banking protocol for backup clearing and audit purposes.
mice502212.2Application serversBuilt-inAs neededMICE protocol supports multimedia or academic networking platforms with secure content routing.
htuilsrv502312.2Application serversBuilt-inAs neededHTUILSrv provides secure HTML UI rendering and delivery in thick-client applications.
scpi-telnet502412.2Debugging and measurementBuilt-inAs neededSCPI-Telnet provides command-line access to instruments using SCPI over Telnet.
scpi-raw502512.2Debugging and measurementBuilt-inAs neededSCPI-Raw is a transport method for sending raw instrument commands over TCP/IP.
strexec-d502612.2Application serversBuilt-inAs neededStrExec-D delivers encrypted stream responses in grid computing environments.
strexec-s502712.2Application serversBuilt-inAs neededStrExec-S is a secure stream execution protocol for distributed services.
qvr502812.2Network servicesBuilt-inAs neededQVR (Quick Video Relay) protocol used in secure CCTV or remote surveillance streaming.
infobright502912.2Data basesBuilt-inAs neededInfobright protocol manages secure data loading and analytics in columnar databases.
surfpass503012.2Tunneling, secure, ssl, pkiBuilt-inAs neededSurfPass is a secure web proxy protocol used for filtering, authentication, and encrypted web traffic management.
dmp503112.2Instant messengersBuilt-inAs neededDMP (Distributed Management Protocol) is used for configuration and monitoring of smart environments.
signacert-agent503212.2Tunneling, secure, ssl, pkiBuilt-inAs neededSignaCert Agent is used in integrity verification systems to securely validate software and system baselines.