List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| ccu-comm-1 | 4053 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | CCU-Comm-1 is used in aerospace control systems to transmit secure control commands. |
| ccu-comm-2 | 4054 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | CCU-Comm-2 handles encrypted control signals between cockpit control units in avionics systems. |
| ccu-comm-3 | 4055 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | CCU-Comm-3 is a secure protocol for cockpit control unit data exchange in avionics communication systems. |
| lms | 4056 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | LMS (License Management Service) protocol handles secure license check-ins/check-outs in enterprise environments. |
| wfm | 4057 | 12.2 | Data transfer | Built-in | As needed | WFM (Workflow Management) protocol supports orchestration and task coordination with secure execution. |
| kingfisher | 4058 | 12.2 | Network services | Built-in | As needed | A protocol for Kingfisher, managing Kingfisher networked control systems. |
| dlms-cosem | 4059 | 12.2 | Data transfer | Built-in | As needed | DLMS-COSEM is a smart metering protocol with support for secure meter data exchange. |
| dsmeter_iatc | 4060 | 12.2 | Network services | Built-in | As needed | A protocol for DS Meter IATC (Inter-Application Transaction Control), metering distributed apps. |
| ice-location | 4061 | 12.2 | Built-in | As needed | ICE-Location protocol resolves session and media control for multimedia messaging environments. | |
| ice-slocation | 4062 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | ICE-Slocation is used in ICE (Interactive Connectivity Establishment) protocols to securely determine network endpoint locations during NAT traversal in VoIP and WebRTC sessions. |
| ice-router | 4063 | 12.2 | Backup | Built-in | As needed | ICE-Router protocol supports Interactive Connectivity Establishment for NAT traversal in VoIP/WebRTC. |
| ice-srouter | 4064 | 12.2 | Network services | Built-in | As needed | A protocol for ICE SRouter (Internet Connection Engine Secure Router), securing routing. |
| avanti_cdp | 4065 | 12.2 | Remote control | Built-in | As needed | Avanti remote access. |
| pmas | 4066 | 12.2 | Network services | Built-in | As needed | Protocol used in PMAS (Print Management Audit System) for job telemetry and quotas. |
| idp | 4067 | 12.2 | Network services | Built-in | As needed | A protocol for IDP (Identity Protocol), managing identities in networked systems. |
| ipfltbcst | 4068 | 12.2 | Network services | Built-in | As needed | A protocol for IP Filter Broadcast, broadcasting filtered IP data. |
| minger | 4069 | 12.2 | Network services | Built-in | As needed | Minger verifies email validity securely without transferring full messages. |
| tripe | 4070 | 12.2 | Network services | Built-in | As needed | TriPE (Trivial IP Encryption) creates lightweight VPN-like tunnels using UDP. |
| aibkup | 4071 | 12.2 | Network services | Built-in | As needed | A protocol for AI Backup, backing up data in AI networked systems. |
| zieto-sock | 4072 | 12.2 | Application servers | Built-in | As needed | Zieto-Sock is a proprietary protocol used in secure remote control or messaging systems. |
Was this information helpful?
