List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
sift-uft60812.2Data transferBuilt-inAs neededSIFT-UFT is a secure unified file transfer protocol used in forensic and incident response tools.
npmp-trap60912.2Debugging and measurementBuilt-inAs neededNPMP-Trap supports trap delivery in network performance measurement protocols.
npmp-local61012.2Debugging and measurementBuilt-inAs neededNPMP-Local manages local performance measurements for secure network optimization.
npmp-gui61112.2Debugging and measurementBuilt-inAs neededNPMP-GUI supports GUI interactions for configuring performance probes in network systems.
hmmp-ind61212.2Network servicesBuilt-inAs neededA protocol for HMMP indication, part of multimedia protocol signaling.
hmmp-op61312.2Network servicesBuilt-inAs neededA protocol for HMMP operation, managing multimedia data flows over networks.
sshell61412.2Tunneling, secure, ssl, pkiBuilt-inAs neededSShell is a secure shell alternative or wrapper used in constrained environments or embedded devices.
sco-inetmgr61512.2Application serversBuilt-inAs neededSCO-InetMgr manages secure internet services on legacy SCO platforms.
sco-sysmgr61612.2Application serversBuilt-inAs neededSCO-SysMgr protocol handles secure system management for SCO UNIX systems.
sco-dtmgr61712.2Application serversBuilt-inAs neededSCO-DTMgr is a daemon process used in secure time and job scheduling on UNIX systems.
dei-icda61812.2Network servicesBuilt-inAs neededA protocol for DEI ICDA (Integrated Control Data Access), accessing control data.
compaq-evm61912.2Application serversBuilt-inAs neededCompaq-EVM handles secure event management and remote system diagnostics.
sco-websrvrmgr62012.2Application serversBuilt-inAs neededSCO-WebSrvrMgr is a web interface for administering legacy SCO UNIX web server environments.
escp-ip62112.2Network servicesBuilt-inAs neededA protocol for Enhanced Service Control Protocol IP, managing network services.
collaborator62212.2Application serversBuilt-inAs neededCollaborator protocol handles encrypted document review and real-time collaboration.
asf-rmcp62312.2Remote controlBuilt-inAs neededRemote Management Control Protocol used by Intel AMT.
oob-ws-http62312.2Web browsingBuilt-inAs neededOut-of-Band Web Services over HTTP, used for remote management.
cryptoadmin62412.2Tunneling, secure, ssl, pkiBuilt-inAs neededCryptoAdmin is a management protocol used for secure configuration of cryptographic services and key stores.
dec_dlm62512.2Network servicesBuilt-inAs neededA protocol for DEC DLM (Digital License Manager), managing DEC licenses.
asia62612.2Network servicesBuilt-inAs neededA protocol for Asia-specific networking services, context unclear.