List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
na-localise506212.2Tunneling, secure, ssl, pkiBuilt-inAs neededNA-Localise is used in secure network automation platforms for encrypted node discovery.
csrpc506312.2Tunneling, secure, ssl, pkiBuilt-inAs neededCSRPC (Control System RPC) is used in SCADA or automation environments for secure command execution.
ca-1506412.2RTPBuilt-inAs neededCould be a Conditional Access system for encrypted media streams.
ca-2506512.2RTPBuilt-inAs neededAnother Conditional Access channel, for secured video transmissions.
stanag-5066506612.2Network servicesBuilt-inAs neededMilitary protocol standard for HF radio data transfer (NATO STANAG 5066).
authentx506712.2Tunneling, secure, ssl, pkiBuilt-inAs neededAuthentX is a secure authentication platform used in federated identity and policy enforcement systems.
bitforestsrv506812.2Instant messengersBuilt-inAs neededBitForestSrv protocol manages encrypted telemetry and messaging from blockchain services.
i-net-2000-npr506912.2Video, picturesBuilt-inAs neededINET-2000-NPR is a network port registry used in legacy streaming or secure online broadcast systems.
vtsas507012.2Application serversBuilt-inAs neededVTSAS is a secure alerting system for video transmission software platforms.
powerschool507112.2Application serversBuilt-inAs neededPowerSchool protocol is used by educational platforms to securely manage student records and data syncing.
ayiya507212.2Data transferBuilt-inAs neededAYIYA is an IPv6 tunneling protocol that provides secure encapsulation over IPv4 networks.
tag-pm507312.2Application serversBuilt-inAs neededTAG-PM (Television Audience Guide) protocol supports media metadata delivery in broadcast systems.
alesquery507412.2Data basesBuilt-inAs neededALESQuery is used in secure law enforcement database access and query portals.
cp-spxrpts507912.2Video, picturesBuilt-inAs neededCP-SPXRPTS is a specialized reporting protocol for encrypted streaming status and session metrics.
onscreen508012.2Data transferBuilt-inAs neededOnScreen protocol delivers encrypted on-screen display data and menu sync in embedded systems.
sdl-ets508112.2Application serversBuilt-inAs neededSDL-ETS protocol supports real-time system modeling and encrypted data transport.
qcp508212.2Network servicesBuilt-inAs neededQuick Configuration Protocol used for bootstrapping device settings on first boot.
qfp508312.2Data transferBuilt-inAs neededQFP (Quantum File Protocol) handles secure quantum-resistant data transfers.
llrp508412.2Tunneling, secure, ssl, pkiBuilt-inAs neededLLRP (Low Level Reader Protocol) is used for RFID reader communication, often tunneled in enterprise networks.
encrypted-llrp508512.2Tunneling, secure, ssl, pkiBuilt-inAs neededEncrypted LLRP is a secure extension of the Low Level Reader Protocol for RFID systems to ensure encrypted tag data transmission.