List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
micom-pfs49012.2Data transferBuilt-inAs neededMicom-PFS is a protocol for programmable field systems in secure automation workflows.
go-login49112.2Remote controlBuilt-inAs neededRemote login service.
ticf-149212.2Network servicesBuilt-inAs neededTICF-1 is used for control messaging in proprietary industrial automation networks.
ticf-249312.2Network servicesBuilt-inAs neededTICF-2 extends TICF-1 with enhanced diagnostic and session state features.
pov-ray49412.2Network servicesBuilt-inAs neededPOV-Ray distributed rendering protocol syncs rendering jobs and configuration settings.
intecourier49512.2Network servicesBuilt-inAs neededA protocol for InteCourier, delivering data in Inte networked systems.
pim-rp-disc49612.2Network servicesBuilt-inAs neededPIM Rendezvous Point Discovery protocol helps multicast routers find RP candidates.
retrospect49712.2BackupBuilt-inAs neededRetrospect protocol manages backup and restore operations in encrypted data protection systems.
siam49812.2Network servicesBuilt-inAs neededSIAM (Security Information and Management) protocol manages alert aggregation and SIEM sync.
iso-ill49912.2Network servicesBuilt-inAs neededA protocol for ISO ILL (Interlibrary Loan), managing library loans over networks.
isakmp50012.2Network servicesBuilt-inAs neededA protocol for ISAKMP (Internet Security Association and Key Management Protocol), managing keys.
stmf50112.2Network servicesBuilt-inAs neededStorage Target Multipathing Framework protocol manages storage IO across paths.
asa-appl-proto50212.2Network servicesBuilt-inAs neededA protocol for ASA Application Protocol, for appliance or system communication.
intrinsa50312.2Network servicesBuilt-inAs neededA protocol for Intrinsa, supporting Intrinsa networked communication systems.
citadel50412.2Network servicesBuilt-inAs neededA protocol for Citadel, supporting Citadel networked communication systems.
mailbox-lm50512.2E-MailBuilt-inAs neededMailbox-LM manages mailbox access and licenses in secure enterprise email platforms.
ohimsrv50612.2Application serversBuilt-inAs neededOHIMSrv is used in distributed healthcare systems for secure patient metadata transmission.
crs50712.2Network servicesBuilt-inAs neededA protocol for CRS (Control and Reporting Service), reporting control data.
xvttp50812.2Network servicesBuilt-inAs neededXVT Terminal Protocol for remote terminal emulation and graphical interfaces.
snare50912.2Network servicesBuilt-inAs neededSystem iNtrusion Analysis and Reporting Environment — exports system audit logs.