List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| wsdapi-s | 5358 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | WSDAPI-S is a secure variant of the Web Services on Devices API, used in service discovery and management over TLS. |
| ms-alerter | 5359 | 12.2 | Instant messengers | Built-in | As needed | MS-Alerter sends secure administrative alerts in Windows enterprise domains. |
| ms-sideshow | 5360 | 12.2 | Network services | Built-in | As needed | MS-SideShow synchronizes data to auxiliary displays in Windows environments. |
| ms-s-sideshow | 5361 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | MS-S-Sideshow is a Microsoft protocol enabling encrypted auxiliary device communication such as external displays or widgets. |
| serverwsd2 | 5362 | 12.2 | Application servers | Built-in | As needed | ServerWSD2 is a web services daemon protocol supporting management and orchestration tasks. |
| net-projection | 5363 | 12.2 | Network services | Built-in | As needed | Enables screen mirroring and projection over IP networks using UDP and control layers. |
| stresstester | 5397 | 12.2 | Data transfer | Built-in | As needed | StressTester protocol is used for performance diagnostics and load simulation over secure channels. |
| elektron-admin | 5398 | 12.2 | Network services | Built-in | As needed | A protocol for Elektron Admin, managing networked administrative tasks. |
| securitychase | 5399 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | SecurityChase is a financial platform’s secure API used for encrypted transaction processing or identity verification. |
| excerpt | 5400 | 12.2 | Web browsing | Built-in | As needed | Excerpt Search |
| excerpts | 5401 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | Excerpts protocol supports selective tunneling of encrypted media or document blocks. |
| hpoms-ci-lstn | 5403 | 12.2 | Data transfer | Built-in | As needed | HPOMS-CI-LSTN listens for configuration item updates in HP Operations Manager with secure transport. |
| hpoms-dps-lstn | 5404 | 12.2 | Data transfer | Built-in | As needed | HPOMS-DPS-LSTN listens for discovery data in HP Ops Manager environments with encryption. |
| netsupport | 5405 | 12.2 | Remote control | Built-in | As needed | Remote desktop and support tool. |
| systemics-sox | 5406 | 12.2 | Transactions, banking, trading | Built-in | As needed | Systemics-SOX supports SOX-compliant logging and auditing in banking and financial environments. |
| foresyte-clear | 5407 | 12.2 | Network services | Built-in | As needed | Foresyte Clear syncs telemetry from surveillance or facility control environments. |
| foresyte-sec | 5408 | 12.2 | Network services | Built-in | As needed | Foresyte Secure provides encrypted telemetry from building control or camera systems. |
| salient-dtasrv | 5409 | 12.2 | Application servers | Built-in | As needed | Salient-DTASrv is a telemetry protocol used in data analytics for secure sensor collection. |
| salient-usrmgr | 5410 | 12.2 | Network services | Built-in | As needed | User Manager telemetry protocol in Salient video analytics or access control. |
| actnet | 5411 | 12.2 | Network services | Built-in | As needed | A protocol for ActNet, supporting active network communication. |
Was this information helpful?
