List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
asipregistry68712.2Network servicesBuilt-inAs neededA protocol for Apple System Image Processor registry, managing system images.
realm-rusd68812.2Application serversBuilt-inAs neededRealm-RUSD protocol is used in secure authentication for federated identity or academic systems.
nmap68912.2Network servicesBuilt-inAs neededNetwork scanning protocol used to discover hosts, ports, and services.
vatp69012.2Network servicesBuilt-inAs neededVirtual Access Transport Protocol handles VPN session control and link maintenance.
msexch-routing69112.2E-MailBuilt-inAs neededMSExch-Routing handles mail routing between Microsoft Exchange servers.
hyperwave-isp69212.2Application serversBuilt-inAs neededHyperwave-ISP protocol supports secure indexing and retrieval in enterprise information systems.
connendp69312.2Application serversBuilt-inAs neededConnEndP is a session endpoint configuration protocol used in secure VoIP and UC environments.
ha-cluster69412.2Application serversBuilt-inAs neededHA-Cluster protocol handles secure messaging and failover coordination in high availability clusters.
ieee-mms-ssl69512.2Mobile protocolsBuilt-inAs neededIEEE-MMS-SSL secures access to Manufacturing Messaging Services in industrial automation.
rushd69612.2Application serversBuilt-inAs neededRushd is a secure dispatcher used in render farms and compute clusters.
uuidgen69712.2Application serversBuilt-inAs neededUUIDGen is a protocol that provides globally unique identifiers for secure resource tracking.
olsr69812.2Network servicesBuilt-inAs neededOLSR (Optimized Link State Routing) protocol provides dynamic routing for mesh networks.
accessnetwork69912.2Network servicesBuilt-inAs neededA protocol for Access Network, providing access in networked systems.
epp70012.2Network servicesBuilt-inAs neededA protocol for Enhanced Print Protocol, improving networked printing services.
lmp70112.2Network servicesBuilt-inAs neededLMP (Link Management Protocol) manages links in optical and transport networks.
iris-beep70212.2Network servicesBuilt-inAs neededA protocol for IRIS BEEP (Blocks Extensible Exchange Protocol), exchanging blocks.
elcsd70412.2Debugging and measurementBuilt-inAs neededELCSD (Electronic License Certificate Service Daemon) manages license status and reporting.
agentx70512.2Debugging and measurementBuilt-inAs neededAgentX is a sub-agent communication protocol used in SNMP master agent architectures.
silc70612.2Network servicesBuilt-inAs neededSecure Internet Live Conferencing protocol supports encrypted chat and conferencing.
borland-dsj70712.2Application serversBuilt-inAs neededBorland-DSJ is a streaming and control protocol for multimedia playback in Borland tools.