List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| j-link | 19020 | 12.2 | Unknown | Built-in | As needed | j-link operates on port 19020 and facilitates debugging and communication for Segger J-Link hardware. |
| opsec-uaa | 19191 | 12.2 | Unknown | Built-in | As needed | opsec-uaa operates on port 19191 and supports user authorization auditing in Check Point security environments. |
| ua-secureagent | 19194 | 12.2 | Unknown | Built-in | As needed | ua-secureagent operates on port 19194 and supports UserAuthority SecureAgent for secure authentication and access control in enterprise environments. |
| keysrvr | 19283 | 12.2 | Unknown | Built-in | As needed | keysrvr operates on port 19283 and manages cryptographic key exchange and distribution in secure environments. |
| keyshadow | 19315 | 12.2 | Unknown | Built-in | As needed | keyshadow operates on port 19315 and manages secure key storage or shadowing for cryptographic services. |
| mtrgtrans | 19398 | 12.2 | Unknown | Built-in | As needed | mtrgtrans operates on port 19398 and facilitates data transmission in MTRG (Monitoring and Reporting Gateway) systems. |
| hp-sco | 19410 | 12.2 | Unknown | Built-in | As needed | hp-sco operates on port 19410 and is used for Service Configuration Orchestration in HP device management. |
| hp-sca | 19411 | 12.2 | Unknown | Built-in | As needed | hp-sca operates on port 19411 and supports Secure Configuration Automation in HP enterprise environments. |
| hp-sessmon | 19412 | 12.2 | Unknown | Built-in | As needed | hp-sessmon operates on port 19412 and enables session monitoring in HP infrastructure systems. |
| fxuptp | 19539 | 12.2 | Unknown | Built-in | As needed | fxuptp operates on port 19539 and enables time synchronization using UPTP in Forex or trading environments. |
| sxuptp | 19540 | 12.2 | Unknown | Built-in | As needed | sxuptp operates on port 19540 and provides precise time synchronization in SXU Precision Time Protocol networks. |
| jcp | 19541 | 12.2 | Unknown | Built-in | As needed | jcp operates on port 19541 and is used for JCP (Java Control Protocol) communication in server-side Java environments. |
| mle | 19788 | 12.2 | Unknown | Built-in | As needed | mle operates on port 19788 and provides services for machine learning engines or data processing environments. |
| iec-104-sec | 19998 | 12.2 | Unknown | Built-in | As needed | iec-104-sec operates on port 19998 and provides secure SCADA communication via the IEC 60870-5-104 standard. |
| dnp-sec | 19999 | 12.2 | Unknown | Built-in | As needed | dnp-sec operates on port 19999 and provides encrypted communication for the DNP3 protocol used in SCADA systems. |
| dnp | 20000 | 12.2 | Unknown | Built-in | As needed | dnp operates on port 20000 and enables communication in Distributed Network Protocol 3 for SCADA and automation. |
| microsan | 20001 | 12.2 | Unknown | Built-in | As needed | microsan operates on port 20001 and enables storage networking and management for MicroSAN platforms. |
| commtact-http | 20002 | 12.2 | Web browsing | Built-in | As needed | Commtact HTTP, registered 2004-12 |
| commtact-https | 20003 | 12.2 | Web browsing | Built-in | As needed | Commtact HTTPS, registered 2004-12 |
| openwebnet | 20005 | 12.2 | Network services | Built-in | As needed | OpenWebNet is a home automation protocol from BTicino for secure lighting and appliance control. |
Was this information helpful?
