List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
cert-responder164012.2Network servicesBuilt-inAs neededA protocol for Certificate Responder, responding to certificate requests in networks.
invision164112.2Network servicesBuilt-inAs neededA protocol for InVision, supporting InVision networked design or collaboration.
isis-am164212.2Network servicesBuilt-inAs neededA protocol for ISIS AM (Access Method), accessing ISIS networked systems.
isis-ambc164312.2Network servicesBuilt-inAs neededA protocol for ISIS AMBC (Access Method Broadcast), broadcasting in ISIS systems.
saiseh164412.2Network servicesBuilt-inAs neededSAISEH telemetry sync used in education hardware and e-learning systems.
sightline164512.2Network servicesBuilt-inAs neededSightline telemetry protocol used in performance monitoring and predictive analytics platforms.
sa-msg-port164612.2Network servicesBuilt-inAs neededSecurity Agent Message Port used to transmit alerts and signature update status.
rsap164712.2Network servicesBuilt-inAs neededRSA Authentication Protocol used for secure login and challenge-response systems.
concurrent-lm164812.2Network servicesBuilt-inAs neededA protocol for Concurrent License Manager, managing concurrent licenses.
kermit164912.2Network servicesBuilt-inAs neededA protocol for Kermit, transferring files in Kermit networked systems.
nkd165012.2Network servicesBuilt-inAs neededTelemetry daemon used in NKD systems for device performance reporting.
shiva_confsrvr165112.2Network servicesBuilt-inAs neededShiva Conference Server protocol handles session sync in legacy remote access tools.
xnmp165212.2Network servicesBuilt-inAs neededXML-based Network Management Protocol handles device state, alerts, and logs.
alphatech-lm165312.2Network servicesBuilt-inAs neededA protocol for AlphaTech License Manager, controlling AlphaTech licenses.
stargatealerts165412.2Network servicesBuilt-inAs neededSecure alert channel used by Stargate IoT controllers for critical event updates.
dec-mbadmin165512.2Network servicesBuilt-inAs neededA protocol for DEC MBAdmin (Management Bridge Admin), managing bridge admin.
dec-mbadmin-h165612.2Network servicesBuilt-inAs neededA protocol for DEC MBAdmin-H (Management Bridge Admin High), high-level admin bridge.
fujitsu-mmpdc165712.2Network servicesBuilt-inAs neededA protocol for Fujitsu’s Multi-Media Protocol Data Channel, for multimedia streaming or control.
sixnetudr165812.2Network servicesBuilt-inAs neededSixnet UDR protocol transmits telemetry from Sixnet industrial controllers.
sg-lm165912.2Network servicesBuilt-inAs neededSG license manager protocol for synchronizing entitlements in simulation platforms.