List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| na-localise | 5062 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | NA-Localise is used in secure network automation platforms for encrypted node discovery. |
| csrpc | 5063 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | CSRPC (Control System RPC) is used in SCADA or automation environments for secure command execution. |
| ca-1 | 5064 | 12.2 | RTP | Built-in | As needed | Could be a Conditional Access system for encrypted media streams. |
| ca-2 | 5065 | 12.2 | RTP | Built-in | As needed | Another Conditional Access channel, for secured video transmissions. |
| stanag-5066 | 5066 | 12.2 | Network services | Built-in | As needed | Military protocol standard for HF radio data transfer (NATO STANAG 5066). |
| authentx | 5067 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | AuthentX is a secure authentication platform used in federated identity and policy enforcement systems. |
| bitforestsrv | 5068 | 12.2 | Instant messengers | Built-in | As needed | BitForestSrv protocol manages encrypted telemetry and messaging from blockchain services. |
| i-net-2000-npr | 5069 | 12.2 | Video, pictures | Built-in | As needed | INET-2000-NPR is a network port registry used in legacy streaming or secure online broadcast systems. |
| vtsas | 5070 | 12.2 | Application servers | Built-in | As needed | VTSAS is a secure alerting system for video transmission software platforms. |
| powerschool | 5071 | 12.2 | Application servers | Built-in | As needed | PowerSchool protocol is used by educational platforms to securely manage student records and data syncing. |
| ayiya | 5072 | 12.2 | Data transfer | Built-in | As needed | AYIYA is an IPv6 tunneling protocol that provides secure encapsulation over IPv4 networks. |
| tag-pm | 5073 | 12.2 | Application servers | Built-in | As needed | TAG-PM (Television Audience Guide) protocol supports media metadata delivery in broadcast systems. |
| alesquery | 5074 | 12.2 | Data bases | Built-in | As needed | ALESQuery is used in secure law enforcement database access and query portals. |
| cp-spxrpts | 5079 | 12.2 | Video, pictures | Built-in | As needed | CP-SPXRPTS is a specialized reporting protocol for encrypted streaming status and session metrics. |
| onscreen | 5080 | 12.2 | Data transfer | Built-in | As needed | OnScreen protocol delivers encrypted on-screen display data and menu sync in embedded systems. |
| sdl-ets | 5081 | 12.2 | Application servers | Built-in | As needed | SDL-ETS protocol supports real-time system modeling and encrypted data transport. |
| qcp | 5082 | 12.2 | Network services | Built-in | As needed | Quick Configuration Protocol used for bootstrapping device settings on first boot. |
| qfp | 5083 | 12.2 | Data transfer | Built-in | As needed | QFP (Quantum File Protocol) handles secure quantum-resistant data transfers. |
| llrp | 5084 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | LLRP (Low Level Reader Protocol) is used for RFID reader communication, often tunneled in enterprise networks. |
| encrypted-llrp | 5085 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | Encrypted LLRP is a secure extension of the Low Level Reader Protocol for RFID systems to ensure encrypted tag data transmission. |
Was this information helpful?
