List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
peocoll963112.2UnknownBuilt-inAs neededpeocoll operates on port 9631 and supports PEO Collector for collecting process execution data.
mc-comm963212.2UnknownBuilt-inAs neededmc-comm operates on port 9632 and supports interprocess communication in MC (Management Console) based tools.
pqsflows964012.2UnknownBuilt-inAs neededpqsflows operates on port 9640 and is used by PQS Flows for managing flow-based data processing.
xmms2966712.2UnknownBuilt-inAs neededxmms2 operates on port 9667 and provides audio streaming and control services for the XMMS2 music player daemon.
tec5-sdctp966812.2UnknownBuilt-inAs neededtec5-sdctp operates on port 9668 and is used by TEC5 devices for secure device control and telemetry processing.
client-wakeup969412.2UnknownBuilt-inAs neededClient Wakeup protocol used in Wake-on-LAN or remote desktop management systems.
ccnx969512.2UnknownBuilt-inAs neededccnx operates on port 9695 and is used by Content-Centric Networking (CCNx) protocols for named data object communication.
board-roar970012.2UnknownBuilt-inAs neededboard-roar operates on port 9700 and provides communication for soundboard control or audio event notification systems.
l5nas-parchan974712.2UnknownBuilt-inAs neededl5nas-parchan operates on port 9747 and provides parallel channel communication for L5NAS storage systems.
board-voip975012.2UnknownBuilt-inAs neededBoard VoIP protocol used in digital conferencing and integrated audio systems.
rasadv975312.2UnknownBuilt-inAs neededrasadv operates on port 9753 and is used by RAS Advertising for remote access service discovery.
tungsten-http976212.2Web browsingBuilt-inAs neededTungsten software performing HTTP requests
davsrc980012.2UnknownBuilt-inAs neededdavsrc operates on port 9800 and is used by WebDAV Source for distributed authoring and versioning over HTTP.
sstp-2980112.2UnknownBuilt-inAs neededsstp-2 operates on port 9801 and functions as a secure tunneling protocol, supporting encrypted communication over HTTP.
davsrcs980212.2UnknownBuilt-inAs neededdavsrcs operates on port 9802 and supports Secure WebDAV Source for encrypted authoring and versioning.
sapv1987512.2UnknownBuilt-inAs neededsapv1 operates on port 9875 and is used by the SAPV1 protocol for real-time data exchange in specialized environments.
sd987612.2UnknownBuilt-inAs neededsd operates on port 9876 and provides secure data transfer services in SD-based applications.
kca-service987812.2UnknownBuilt-inAs neededkca-service operates on port 9878 and facilitates KCA Service for key or certificate authority operations.
cyborg-systems988812.2UnknownBuilt-inAs neededcyborg-systems operates on port 9888 and facilitates Cyborg Systems for robotic or automated system communication.
gt-proxy988912.2Tunneling, secure, ssl, pkiBuilt-inAs neededGT-Proxy is used to securely tunnel traffic from gaming clients or geographic telemetry systems.