List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
passgo-tivoli62712.2Application serversBuilt-inAs neededPassGo-Tivoli integrates privilege escalation with Tivoli systems for secure access control.
qmqp62812.2Network servicesBuilt-inAs neededQuick Mail Queueing Protocol used to transfer mail between SMTP queues efficiently.
3com-amp362912.2Application serversBuilt-inAs needed3Com-AMP3 manages media or analytics functions on legacy 3Com devices.
rda63012.2Network servicesBuilt-inAs neededRemote Data Access protocol used in distributed industrial SCADA systems.
ipp63112.2PrintingBuilt-inAs neededInternet Printing Protocol, a standard protocol used for printing over a network.
bmpp63212.2Network servicesBuilt-inAs neededA protocol for BMPP (Business Management Protocol Processor), processing business data.
servstat63312.2Debugging and measurementBuilt-inAs neededServStat protocol gathers encrypted status information from web or app servers.
ginad63412.2Network servicesBuilt-inAs neededGINAD syncs networked industrial diagnostics and asset metadata.
rlzdbase63512.2Network servicesBuilt-inAs neededRLZ Database sync protocol manages sync of high-speed transaction stores.
ldaps63612.2Tunneling, secure, ssl, pkiBuilt-inAs neededLDAPS is the secure version of the Lightweight Directory Access Protocol, running over TLS.
lanserver63712.2Network servicesBuilt-inAs neededA protocol for LAN Server, serving data in LAN networked systems.
mcns-sec63812.2Tunneling, secure, ssl, pkiBuilt-inAs neededThis protocol is used for secure tunneling or encrypted communication over networks. It typically supports SSL/TLS, PKI-based authentication, or VPN-like capabilities to ensure confidentiality, integrity, and secure session transport.
msdp63912.2Network servicesBuilt-inAs neededMSDP discovers multicast sources and supports routing in multicast networks.
entrust-sps64012.2Network servicesBuilt-inAs neededA protocol for Entrust Secure Policy Server, managing security policies.
repcmd64112.2Network servicesBuilt-inAs neededReplica Command protocol controls replication commands between database mirrors.
esro-emsdp64212.2Network servicesBuilt-inAs neededA protocol for ESRO EMSDP (Efficient Short Remote Operations), optimizing remote calls.
sanity64312.2Network servicesBuilt-inAs neededSanity check sync protocol ensures integrity of system configuration and settings.
dwr64412.2Network servicesBuilt-inAs neededA protocol for DWR (Dynamic Web Remoting), enabling dynamic web communication.
pssc64512.2Network servicesBuilt-inAs neededPSSC protocol transmits control messages between networked power and security systems.
ldp64612.2Network servicesBuilt-inAs neededA protocol for LDP (Label Distribution Protocol), distributing labels in MPLS networks.