List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| bootps/dhcp | 67 | 12.2 | Network services | Built-in | As needed | A protocol for BOOTP Server/DHCP, assigning IP addresses dynamically. |
| bootpc | 68 | 12.2 | Network services | Built-in | As needed | A protocol for BOOTP Client, requesting IP addresses in networks. |
| tftp | 69 | 12.2 | Data transfer | Built-in | As needed | TFTP (Trivial File Transfer Protocol) is a lightweight, unencrypted protocol for transferring files over LAN. |
| gopher | 70 | 12.2 | Data transfer | Built-in | As needed | Gopher is a pre-HTTP document retrieval protocol supporting structured navigation over TCP. |
| netrjs-1 | 71 | 12.2 | Remote control | Built-in | As needed | Remote job submission protocol. |
| netrjs-2 | 72 | 12.2 | Remote control | Built-in | As needed | Another variant of remote job submission. |
| netrjs-3 | 73 | 12.2 | Remote control | Built-in | As needed | Variant of remote job submission. |
| netrjs-4 | 74 | 12.2 | Remote control | Built-in | As needed | Another remote job submission protocol. |
| deos | 76 | 12.2 | Data bases | Built-in | As needed | DEOS is a deterministic OS protocol that can synchronize secure DB activity in avionics or robotics. |
| vettcp | 78 | 12.2 | Network services | Built-in | As needed | VetTCP protocol validates TCP traffic integrity in custom firewalls or IPS systems. |
| finger | 79 | 12.2 | Network services | Built-in | As needed | A protocol for Finger, a user information lookup service over networks. |
| xfer | 82 | 12.2 | Debugging and measurement | Built-in | As needed | XFER is a generic label used for data transfer operations, typically in backup, replication, or FTP-like scenarios. It often appears in legacy systems to denote a file or block transmission routine. |
| mit-ml-dev | 83 | 12.2 | Network services | Built-in | As needed | MIT-ML-Dev is a secure messaging protocol for machine learning experimentation platforms. |
| ctf | 84 | 12.2 | Network services | Built-in | As needed | A protocol for CTF (Common Trace Facility), tracing data in networks. |
| mfcobol | 86 | 12.2 | Network services | Built-in | As needed | MFCobol provides COBOL-based license control and telemetry for secure business logic apps. |
| kerberos | 88 | 12.2 | Data transfer | Built-in | As needed | Kerberos is a network authentication protocol using encrypted tickets to verify identity. |
| su-mit-tg | 89 | 12.2 | Remote control | Built-in | As needed | SU/MIT Telnet Gateway (IANA official) |
| dnsix | 90 | 12.2 | Network services | Built-in | As needed | Department of Defense DNSIX protocol used for secure audit, identification, and authentication telemetry. |
| mit-dov | 91 | 12.2 | Network services | Built-in | As needed | MIT-DOV manages secure digital overlays in academic or simulation tools. |
| npp | 92 | 12.2 | Printing | Built-in | As needed | "Network Print Protocol" used in managing print jobs or communications with networked printers. |
Was this information helpful?
