List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| tolteces | 4375 | 12.2 | Application servers | Built-in | As needed | Tolteces is a secure system management protocol used in academic or research environments. |
| bip | 4376 | 12.2 | Application servers | Built-in | As needed | BIP (Banking Industry Protocol) is used for financial message transmission in core banking infrastructure. |
| cp-spxsvr | 4377 | 12.2 | Application servers | Built-in | As needed | CP-SPXSvr is a secure backend protocol for remote rendering and visualization. |
| cp-spxdpy | 4378 | 12.2 | Application servers | Built-in | As needed | CP-SPXDpy is a protocol for secure screen display forwarding in embedded systems. |
| ctdb | 4379 | 12.2 | Application servers | Built-in | As needed | CTDB (Cluster Trivial Database) protocol is used for high availability Samba clusters and secure locking. |
| xandros-cms | 4389 | 12.2 | Application servers | Built-in | As needed | Xandros-CMS is a secure configuration and management protocol for Linux-based enterprise endpoints. |
| wiegand | 4390 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | Wiegand protocol is commonly used in access control systems for transmitting encrypted card and biometric data. |
| apwi-imserver | 4391 | 12.2 | Printing | Built-in | As needed | A service related to the APWI imaging or print server environment, managing print jobs or devices. |
| apwi-rxserver | 4392 | 12.2 | Network services | Built-in | As needed | A protocol for APWI RX Server, receiving data in a networked system. |
| apwi-rxspooler | 4393 | 12.2 | Application servers | Built-in | As needed | APWI-RXSpooler handles secure print spooling in industrial or large-scale printing systems. |
| apwi-disc | 4394 | 12.2 | Network services | Built-in | As needed | A protocol for APWI discovery, used to identify devices or services in a networked environment. |
| omnivisionesx | 4395 | 12.2 | Network services | Built-in | As needed | OmniVisionESX protocol controls diagnostic video endpoints in surgical environments. |
| fly | 4396 | 12.2 | Mobile protocols | Built-in | As needed | Fly protocol handles encrypted messaging and push data sync for mobile productivity tools. |
| ds-srv | 4400 | 12.2 | Data bases | Built-in | As needed | DS-SRV is a directory service protocol that manages secure access to metadata or schema repositories. |
| ds-srvr | 4401 | 12.2 | Application servers | Built-in | As needed | DS-Srvr is the directory server protocol for LDAP or Active Directory infrastructure. |
| ds-clnt | 4402 | 12.2 | Application servers | Built-in | As needed | DS-Clnt is the client-side protocol for directory service lookups and secure authentication. |
| ds-user | 4403 | 12.2 | Network services | Built-in | As needed | A protocol for Distributed System User, managing user interactions in distributed systems. |
| ds-admin | 4404 | 12.2 | Application servers | Built-in | As needed | DS-Admin is used to securely manage directory services in LDAP-based identity systems. |
| ds-mail | 4405 | 12.2 | Network services | Built-in | As needed | A protocol for Distributed System Mail, managing mail in distributed systems. |
| ds-slp | 4406 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | DS-SLP is a secure variant of Service Location Protocol used in directory-enabled networks. |
Was this information helpful?