List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
bb198412.2Network servicesBuilt-inAs neededA protocol for BB, a bulletin board or basic broadcast network service.
hsrp198512.2Network servicesBuilt-inAs neededA protocol for HSRP (Hot Standby Router Protocol), ensuring router redundancy.
licensedaemon198612.2Application serversBuilt-inAs neededLicenseDaemon protocol provides secure license verification and usage monitoring for enterprise software.
tr-rsrb-p1198712.2Application serversBuilt-inAs neededTR-RSRB-P1 is a companion protocol to support legacy RSRB over TCP/IP in branch networking.
tr-rsrb-p2198812.2Application serversBuilt-inAs neededTR-RSRB-P2 is used in Cisco RSRB (Remote Source-Route Bridging) for secure Layer 2 tunneling.
mshnet198912.2Network servicesBuilt-inAs neededMSHNet manages Smart Home device control in Microsoft environments.
stun-p1199012.2Network servicesBuilt-inAs neededPrimary STUN channel 1 for WebRTC NAT traversal in media apps.
stun-p2199112.2Network servicesBuilt-inAs neededSecondary fallback STUN control interface for connection negotiation.
ipsendmsg199212.2Network servicesBuilt-inAs neededA protocol for IP Send Message, sending messages over IP networks.
snmp-tcp-port199312.2Debugging and measurementBuilt-inAs neededSNMP-TCP-Port is used for SNMP-over-TCP communication, useful in firewalled environments.
stun-port199412.2Network servicesBuilt-inAs neededStandard STUN NAT traversal port for VoIP and WebRTC connectivity setup.
perf-port199512.2Network servicesBuilt-inAs neededPerformance Port used to report benchmark results and tuning metrics.
tr-rsrb-port199612.2Network servicesBuilt-inAs neededTR-RSRB protocol for route switch routing bridges in large-scale telecom networks.
gdp-port199712.2Network servicesBuilt-inAs neededGDP telemetry protocol syncs data from Global Distribution Platforms in CDN and media.
x25-svc-port199812.2Network servicesBuilt-inAs neededPort for X.25 service traffic, often used in legacy packet-switched networks.
tcp-id-port199912.2Network servicesBuilt-inAs neededEchoes back identifier data used for origin verification or time sync.
cisco-sccp200012.2Application serversBuilt-inAs neededCisco-SCCP (Skinny) is a proprietary VoIP control protocol used in Cisco CallManager systems.
dc200112.2Network servicesBuilt-inAs neededA protocol for DC (Data Center), managing data center networked operations.
wizard200112.2Network servicesBuilt-inAs neededApplication install and orchestration protocol used in guided configuration tools.
globe200212.2Network servicesBuilt-inAs neededGLOBE telemetry protocol used in global environmental monitoring stations.