List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
entrust-kmsh70912.2Application serversBuilt-inAs neededEntrust-KMSH is the secure key management session handler used in Entrust cryptographic modules.
entrust-ash71012.2Application serversBuilt-inAs neededEntrust-ASH is a secure authentication service handler in Entrust PKI infrastructure.
cisco-tdp71112.2Network servicesBuilt-inAs neededA protocol for Cisco TDP (Tag Distribution Protocol), distributing tags in Cisco networks.
tbrpf71212.2Network servicesBuilt-inAs neededTopology Dissemination Based on Reverse-Path Forwarding used in mobile ad-hoc networks.
iris-xpc71312.2Network servicesBuilt-inAs neededA protocol for IRIS XPC (Extended Procedure Call), extending procedure calls.
iris-xpcs71412.2Network servicesBuilt-inAs neededA protocol for IRIS XPCS (Extended Procedure Call Secure), securing procedure calls.
iris-lwz71512.2Network servicesBuilt-inAs neededA protocol for IRIS LWZ (Lightweight Zip), compressing data in IRIS networks.
pana71612.2Network servicesBuilt-inAs neededProtocol for carrying Authentication for Network Access (PANA) in IP-based networks.
netviewdm172912.2Application serversBuilt-inAs neededNetViewDM1 is an IBM NetView module for secure device monitoring in enterprise systems.
netviewdm273012.2Application serversBuilt-inAs neededNetViewDM2 extends DM1 with additional performance data metrics.
netviewdm373112.2Application serversBuilt-inAs neededNetViewDM3 supports alerts and configuration management in the IBM NetView suite.
netgw74112.2Network servicesBuilt-inAs neededNetGW protocol bridges legacy and modern protocols in industrial network gateways.
netrcs74212.2Network servicesBuilt-inAs neededNetRCS enables encrypted remote command and control for enterprise infrastructure.
flexlm74412.2Application serversBuilt-inAs neededFlexLM is a license management protocol widely used across commercial software suites.
fujitsu-dev74712.2Network servicesBuilt-inAs neededA protocol for Fujitsu device communication, in hardware or peripheral management.
ris-cm74812.2Network servicesBuilt-inAs neededRIS CM (Resource Inventory Sync - Configuration Management) protocol manages asset records.
kerberos-adm74912.2Network servicesBuilt-inAs neededA protocol for Kerberos Admin, administering Kerberos networked systems.
kerberos-iv75012.2Network servicesBuilt-inAs neededA protocol for Kerberos IV, an earlier Kerberos authentication protocol.
rfile75012.2Network servicesBuilt-inAs neededRemote file protocol supports file transfers in legacy BSD environments.
pump75112.2Network servicesBuilt-inAs neededPUMP protocol supports provisioning and push updates in mobile broadband systems.
←1…4344454647…321→