List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
opalis-robot31412.2Application serversBuilt-inAs neededOpalis-Robot is a workflow automation protocol from Microsoft System Center Orchestrator suite.
dpsi31512.2Network servicesBuilt-inAs neededA protocol for DPSI (Distributed Processing System Interface), enabling distributed computing.
decauth31612.2Network servicesBuilt-inAs neededA protocol for DECAuth (Distributed Enterprise Control Authentication), authenticating users.
zannet31712.2Network servicesBuilt-inAs neededZannet telemetry sync protocol for encrypted zero-trust overlay networks.
pkix-timestamp31812.2Debugging and measurementBuilt-inAs neededPKIX-Timestamp protocol handles trusted timestamping in public key infrastructure systems.
ptp-event31912.2Debugging and measurementBuilt-inAs neededPTP-Event handles event message transport in Precision Time Protocol networks.
ptp-general32012.2Debugging and measurementBuilt-inAs neededPTP-General transmits management and sync messages in IEEE 1588 time sync systems.
pip32112.2Network servicesBuilt-inAs neededPIP protocol provides network transport and telemetry for distributed printers.
rtsps32212.2Network servicesBuilt-inAs neededReal-Time Streaming Protocol Secure — provides encrypted media session signaling.
rpki-rtr32312.2Tunneling, secure, ssl, pkiBuilt-inAs neededRPKI-RTR is a router protocol for retrieving validated routing information from RPKI caches.
rpki-rtr-tls32412.2Tunneling, secure, ssl, pkiBuilt-inAs neededRPKI-RTR-TLS is a secure TLS-based version of the RPKI-Router protocol for BGP validation.
texar33312.2Tunneling, secure, ssl, pkiBuilt-inAs neededTexar is a secure remote access or telemetry protocol, potentially used in defense or aerospace systems.
pdap34412.2Data transferBuilt-inAs neededPDAP is a remote access protocol for synchronized access to personal data assistants.
pawserv34512.2Debugging and measurementBuilt-inAs neededPawServ protocol provides secure communication between CAD or graphics workstations.
zserv34612.2Application serversBuilt-inAs neededZServ protocol is used for secure session management in Zebra-based routing platforms.
fatserv34712.2Application serversBuilt-inAs neededFatServ is a file access tunneling protocol used in distributed or federated storage systems.
csi-sgwp34812.2Remote controlBuilt-inAs neededCabletron Management Protocol (IANA official)
mftp34912.2Data transferBuilt-inAs neededMFTP (Multicast FTP) is a reliable file transfer protocol using multicast and forward error correction.
matip-type-a35012.2Network servicesBuilt-inAs neededMATIP-Type-A allows airline systems to transmit reservation data over IP.
bhoetty35112.2Remote controlBuilt-inAs needed a remote login system.