List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
rfb/vnc590012.2UnknownBuilt-inAs neededrfb/vnc operates on port 5900 and supports remote desktop sharing using Remote Framebuffer Protocol (VNC).
cm591012.2UnknownBuilt-inAs neededcm operates on port 5910 and handles configuration or connection management tasks in distributed systems.
cpdlc591112.2UnknownBuilt-inAs neededcpdlc operates on port 5911 and is used by Controller Pilot Data Link Communication for air traffic control messaging.
fis591212.2UnknownBuilt-inAs neededfis operates on port 5912 and supports communication in FIS (Financial Information System) environments.
ads-c591312.2UnknownBuilt-inAs neededads-c operates on port 5913 and supports Automatic Dependent Surveillance – Contract (ADS-C) in air traffic control systems.
indy596312.2UnknownBuilt-inAs neededindy operates on port 5963 and supports communication in Indy software libraries used in networking applications.
mppolicy-v5596812.2UnknownBuilt-inAs neededmppolicy-v5 operates on port 5968 and manages version 5 policy data in MPPolicy security frameworks.
mppolicy-mgr596912.2UnknownBuilt-inAs neededmppolicy-mgr operates on port 5969 and enables centralized management of policy settings in MPPolicy environments.
couchdb598412.2Data basesBuilt-inAs neededCouchDB is a document-oriented NoSQL database using HTTP/HTTPS for secure RESTful access.
wsman598512.2UnknownBuilt-inAs neededwsman operates on port 5985 and is used for remote system management via the Web Services for Management (WS-Man) protocol.
wsmans598612.2UnknownBuilt-inAs neededwsmans operates on port 5986 and provides secure (HTTPS-based) remote management using WS-Man.
wbem-rmi598712.2UnknownBuilt-inAs neededwbem-rmi uses port 5987. No additional documentation found.
wbem-http598812.2Web browsingBuilt-inAs neededWeb-Based Enterprise Management over HTTP, used for system management.
wbem-https598912.2Web browsingBuilt-inAs neededWeb-Based Enterprise Management over HTTPS, used for system management.
wbem-exp-https599012.2Web browsingBuilt-inAs neededWeb-Based Enterprise Management experimental over HTTPS.
nuxsl599112.2UnknownBuilt-inAs needednuxsl operates on port 5991 and refers to proprietary communication in NUX Secure Layer protocols.
consul-insight599212.2UnknownBuilt-inAs neededconsul-insight operates on port 5992 and facilitates Consul Insight for service discovery and monitoring in Consul environments.
cvsup599912.2UnknownBuilt-inAs neededcvsup operates on port 5999 and facilitates CVSup for CVS repository synchronization and updates.
ndl-ahp-svc606412.2UnknownBuilt-inAs neededndl-ahp-svc operates on port 6064 and supports healthcare application hosting in NDL environments.
winpharaoh606512.2UnknownBuilt-inAs neededwinpharaoh operates on port 6065 and is associated with Windows-based network analysis or monitoring tools for remote packet inspection or diagnostics.