List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
darcorp-lm167912.2Network servicesBuilt-inAs neededA protocol for DARCorp License Manager, controlling DARCorp software licenses.
microcom-sbp168012.2Network servicesBuilt-inAs neededMicrocom-SBP handles remote configuration and diagnostics for serial breakout processors.
sd-elmd168112.2Network servicesBuilt-inAs neededSecure Device License Manager Daemon syncs activation and lease status.
lanyon-lantern168212.2Network servicesBuilt-inAs neededA protocol for Lanyon Lantern, a network illumination or discovery protocol.
ncpm-hip168312.2Network servicesBuilt-inAs neededNCPM HIP provides host IP telemetry in NetWare environments.
snaresecure168412.2Network servicesBuilt-inAs neededSNARE Secure extension provides encrypted audit log forwarding to SIEM platforms.
n2nremote168512.2Remote controlBuilt-inAs neededPeer-to-peer remote network control.
cvmon168612.2Network servicesBuilt-inAs neededA protocol for CVMon (Control View Monitor), monitoring control systems.
nsjtp-ctrl168712.2Network servicesBuilt-inAs neededNSJTP-Ctrl handles control signaling in HP NonStop Java Transaction Processing environments.
nsjtp-data168812.2Network servicesBuilt-inAs neededNSJTP-Data manages secure data plane operations in NonStop Java environments.
firefox168912.2Network servicesBuilt-inAs neededA protocol tied to Firefox, for browser-related network communication.
ng-umds169012.2Network servicesBuilt-inAs neededHandles secure sync and content delivery from Universal Media Distribution Services.
empire-empuma169112.2Network servicesBuilt-inAs neededA protocol for Empire Empuma, a proprietary network management tool.
sstsys-lm169212.2Network servicesBuilt-inAs neededLicense manager protocol for SSTSys simulation or data analysis tools.
rrirtr169312.2Network servicesBuilt-inAs neededReal-Time Router telemetry sync protocol for hardened or embedded network devices.
rrimwm169412.2Network servicesBuilt-inAs neededMedium-Water Mark protocol used in multi-hop telemetry sync buffers.
rrilwm169512.2Network servicesBuilt-inAs neededLow-Water Mark telemetry sync in radiation-hardened routing environments.
rrifmm169612.2Network servicesBuilt-inAs neededRR Interface Frame Manager Message protocol in satellite telemetry systems.
rrisat169712.2Network servicesBuilt-inAs neededSatellite telemetry sync protocol in Remote Routing Infrastructure systems.
rsvp-encap-1169812.2Network servicesBuilt-inAs neededRSVP Encapsulation protocol 1 used for transporting RSVP messages in VPN tunnels.