List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| permabit-cs | 5312 | 12.2 | Application servers | Built-in | As needed | Permabit-CS provides encrypted deduplication and compliance storage services. |
| rrdp | 5313 | 12.2 | RTP | Built-in | As needed | Remote Replication Data Protocol, used for synchronized streaming or redundancy. |
| opalis-rbt-ipc | 5314 | 12.2 | Data transfer | Built-in | As needed | Opalis-RBT-IPC is used for inter-process communication in Microsoft's System Center Orchestrator. |
| hacl-poll | 5315 | 12.2 | Network services | Built-in | As needed | A protocol for HA Cluster polling, monitoring cluster health in networks. |
| hpbladems | 5316 | 12.2 | Printing | Built-in | As needed | A management service for HP blade servers that could be related to printing services or server-based printing. |
| hpdevms | 5317 | 12.2 | Printing | Built-in | As needed | A service related to HP devices, managing or supporting printing or device connections. |
| pkix-cmc | 5318 | 12.2 | Network services | Built-in | As needed | Certificate Management over CMS (CMC) used for cert enrollment and renewal. |
| bsfserver-zn | 5320 | 12.2 | Built-in | As needed | BSFServer-ZN protocol handles business sync file services over encrypted enterprise connections. | |
| bsfsvr-zn-ssl | 5321 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | BSFSVR-ZN-SSL is an SSL-secured protocol used in backup or restore server coordination in enterprise environments. |
| kfserver | 5343 | 12.2 | Data bases | Built-in | As needed | KFServer (K-Fold Server) is used in secure distributed training or statistical database services. |
| xkotodrcp | 5344 | 12.2 | Data bases | Built-in | As needed | XKoToDRCP is a protocol managing dynamic routing and connection pooling for Oracle databases. |
| stun-behaviors | 5349 | 12.2 | Network services | Built-in | As needed | Extended STUN behaviors test protocol variants under NAT traversal scenarios. |
| pcp-multicast | 5350 | 12.2 | Network services | Built-in | As needed | Multicast extension of PCP allowing group NAT mappings for streaming sources. |
| pcp | 5351 | 12.2 | Network services | Built-in | As needed | Port Control Protocol manages NAT/firewall port mappings for dynamic client applications. |
| dns-llq | 5352 | 12.2 | Network services | Built-in | As needed | A protocol for DNS Link-Local Queries, facilitating local network device discovery via DNS. |
| mdns | 5353 | 12.2 | Network services | Built-in | As needed | mDNS (Multicast DNS) resolves hostnames in local networks without a central DNS server. |
| mdnsresponder | 5354 | 12.2 | Network services | Built-in | As needed | mDNSResponder is Apple's implementation of mDNS used for Bonjour device discovery. |
| llmnr | 5355 | 12.2 | Network services | Built-in | As needed | LLMNR (Link-Local Multicast Name Resolution) resolves hostnames without a DNS server. |
| ms-smlbiz | 5356 | 12.2 | Data transfer | Built-in | As needed | MS-SMLBiz protocol is used in Microsoft Small Business Server environments for secure sync and comms. |
| wsdapi | 5357 | 12.2 | Web browsing | Built-in | As needed | Web Services for Devices API, used for discovering and controlling network devices. |
Was this information helpful?
