List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
cadkey-licman139912.2Application serversBuilt-inAs neededCADKEY-LicMan manages license distribution for CADKEY software over secure networks.
cadkey-tablet140012.2Application serversBuilt-inAs neededCADKEY-Tablet protocol handles digitizer/tablet input for CADKEY design environments.
goldleaf-licman140112.2Application serversBuilt-inAs neededGoldLeaf-LicMan manages encrypted license authorization for financial software suites.
prm-sm-np140212.2Debugging and measurementBuilt-inAs neededPRM-SM-NP manages secure notifications from policy/rule engines in enterprise risk systems.
prm-nm-np140312.2Debugging and measurementBuilt-inAs neededPRM-NM-NP is a protocol for transmitting secure notifications from network policy managers.
igi-lm140412.2Application serversBuilt-inAs neededIGI-LM is a license manager for IGI software tools used in engineering and simulation.
ibm-res140512.2Remote controlBuilt-inAs neededIBM remote services.
netlabs-lm140612.2Application serversBuilt-inAs neededNetLabs-LM is a license manager protocol for NetLabs software or research-focused tools.
dbsa-lm140712.2Data basesBuilt-inAs neededDBSA-LM is a license manager for database system administration tools.
sophia-lm140812.2Application serversBuilt-inAs neededSophia-LM is the license manager for Sophia multimedia or security software.
here-lm140912.2Application serversBuilt-inAs neededHERE-LM is a license management protocol used in HERE mapping and location platforms.
hiq141012.2Application serversBuilt-inAs neededHIQ is a high-integrity query protocol used in compliance-grade database environments.
af141112.2Voice over IPBuilt-inAs neededused for addressing functionality in network security tools or firewall configurations.
innosys141212.2Data basesBuilt-inAs neededInnoSys protocol supports industrial database access and encrypted sensor data storage.
innosys-acl141312.2Data basesBuilt-inAs neededInnoSys-ACL handles access control and secure rule enforcement in InnoSys-managed systems.
ibm-mqseries141412.2Instant messengersBuilt-inAs neededIBM-MQSeries is a secure message queuing protocol for reliable enterprise system communication.
dbstar141512.2Data basesBuilt-inAs neededDBStar protocol supports distributed database control and encrypted data replication.
novell-lu6.2141612.2Remote controlBuilt-inAs neededNovell LU6.2 network protocol.
timbuktu-srv1141712.2Application serversBuilt-inAs neededTimbuktu-Srv1 enables secure remote desktop sessions in legacy enterprise environments.
timbuktu-srv2141812.2Application serversBuilt-inAs neededTimbuktu-Srv2 enables older remote access session control with basic encryption.