List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
uarps21912.2Network servicesBuilt-inAs neededUDP ARP Sync protocol mirrors address resolution entries across local subnets.
imap322012.2E-MailBuilt-inAs neededIMAP3 is an older email access protocol, replaced by IMAP4 for folder and message sync.
fln-spx22112.2Remote controlBuilt-inAs needed a Novell SPX-based file network service.
rsh-spx22212.2Remote controlBuilt-inAs neededRemote Shell over SPX protocol (Novell NetWare).
cdc22312.2Application serversBuilt-inAs neededCDC (Change Data Capture) protocol is used for tracking and syncing database changes securely.
masqdialer22412.2Instant messengersBuilt-inAs neededMasqDialer handles encrypted PPP session dialup and routing configuration.
direct24212.2Network servicesBuilt-inAs neededA protocol for direct data exchange, a generic networking service.
sur-meas24312.2Network servicesBuilt-inAs neededSurveillance Measurement protocol gathers environmental or security sensor data.
inbusiness24412.2Network servicesBuilt-inAs neededA protocol for InBusiness, managing business operations in networked systems.
link24512.2Network servicesBuilt-inAs neededLink protocol handles low-level connectivity and handshake telemetry in embedded links.
dsp327024612.2Remote controlBuilt-inAs neededIBM 3270 terminal emulation.
subntbcst_tftp24712.2Data transferBuilt-inAs neededSubNTBcast-TFTP is a broadcast-based TFTP extension used in subnet-based firmware delivery.
bhfhs24812.2Network servicesBuilt-inAs neededA protocol for BHFHS (Business Host Fieldbus High-Speed), supporting high-speed fieldbus.
set25712.2Transactions, banking, tradingBuilt-inAs neededSET (Secure Electronic Transaction) is a protocol developed by Visa and MasterCard for encrypted credit card payments.
esro-gen25912.2Remote controlBuilt-inAs neededEfficient Short Remote Operations
openport26012.2Network servicesBuilt-inAs neededOpenPort is a secure document delivery protocol used for remote printing and secure mailing.
nsiiops26112.2Network servicesBuilt-inAs neededNSIIOPS is a secure CORBA object access protocol over IIOP and SSL.
arcisdms26212.2Network servicesBuilt-inAs neededA protocol for ARC Information Services DMS, managing document or data services.
hdap26312.2Network servicesBuilt-inAs neededA protocol for High-Definition Audio Protocol, for audio streaming.
bgmp26412.2Network servicesBuilt-inAs neededA protocol for Border Gateway Multicast Protocol, extending BGP for multicast routing.