List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| netsc-dev | 155 | 12.2 | Network services | Built-in | As needed | NetSC-Dev provides secure API access to development-stage smart card services. |
| sqlsrv | 156 | 12.2 | Data bases | Built-in | As needed | SQLSRV is Microsoft's SQL Server protocol for encrypted client-server database communication. |
| knet-cmp | 157 | 12.2 | Remote control | Built-in | As needed | related to Kerberos network management. |
| pcmail-srv | 158 | 12.2 | Built-in | As needed | PCMail-Srv supports an early LAN-based email protocol suite for PC-based messaging. | |
| nss-routing | 159 | 12.2 | Network services | Built-in | As needed | NSS-Routing handles secure routing and message delivery over NSS-managed sessions. |
| sgmp-traps | 160 | 12.2 | Debugging and measurement | Built-in | As needed | SGMP-Traps is the trap notification protocol for the Simple Gateway Monitoring Protocol (SGMP), used in legacy network devices. |
| snmp | 161 | 12.2 | Debugging and measurement | Built-in | As needed | SNMP (Simple Network Management Protocol) enables monitoring and management of networked devices. |
| snmptrap | 162 | 12.2 | Debugging and measurement | Built-in | As needed | SNMPTrap delivers unsolicited notifications (traps) from SNMP-managed devices to management systems. |
| cmip-man | 163 | 12.2 | Application servers | Built-in | As needed | CMIP-MAN is part of the Common Management Information Protocol, used in network device management. |
| cmip-agent | 164 | 12.2 | Application servers | Built-in | As needed | CMIP-Agent provides management data from devices using the Common Management Information Protocol. |
| xns-courier | 165 | 12.2 | Application servers | Built-in | As needed | XNS-Courier is a transport protocol from the Xerox Network Systems suite, used in early networking environments. |
| s-net | 166 | 12.2 | Network services | Built-in | As needed | S-NET protocol transmits real-time control data in fieldbus and industrial automation. |
| namp | 167 | 12.2 | Network services | Built-in | As needed | Node Access Management Protocol authenticates device-level access in automation. |
| rsvd | 168 | 12.2 | Network services | Built-in | As needed | Remote Storage Volume Daemon manages access and sync for virtual storage pools. |
| send | 169 | 12.2 | Network services | Built-in | As needed | Secure Neighbor Discovery extension provides signed ICMPv6 messages for address validation. |
| print-srv | 170 | 12.2 | Printing | Built-in | As needed | A print server service used to manage print queues and jobs on a network. |
| multiplex | 171 | 12.2 | Network services | Built-in | As needed | Multiplexes multiple application sessions over a single secure connection. |
| cl/1 | 172 | 12.2 | Network services | Built-in | As needed | A protocol for CL/1 (Command Line 1), managing command line operations. |
| xyplex-mux | 173 | 12.2 | Network services | Built-in | As needed | Multiplexer protocol for terminal servers and concentrators by Xyplex. |
| mailq | 174 | 12.2 | Built-in | As needed | MailQ protocol checks the mail delivery queue and manages retry logic securely. |
Was this information helpful?
