List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes.
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| ARGUS | 65037 | 12.2 | Unknown | Built-in | As needed | Argus protocol used in network audit and real-time traffic flow monitoring systems. |
| EMCON | 65038 | 12.2 | Unknown | Built-in | As needed | emcon operates on port 65038 and supports EMC Control for enterprise management and control operations. |
| XNET | 65039 | 12.2 | Unknown | Built-in | As needed | xnet operates on port 65039 and refers to internal or cross-platform network messaging systems with limited public specification. |
| CHAOS | 65040 | 12.2 | Unknown | Built-in | As needed | Legacy MIT Chaosnet protocol used for early LAN communication in Lisp systems. |
| UDP Unknown | 65041 | 12.2 | Unknown | Built-in | As needed | udp unknown operates on port 65041 and refers to an undocumented or proprietary UDP-based protocol with limited public information. |
| MUX | 65042 | 12.2 | Unknown | Built-in | As needed | mux operates on port 65042 and enables multiplexed communication in high-throughput network environments. |
| DCN-MEAS | 65043 | 12.2 | Unknown | Built-in | As needed | dcn-meas operates on port 65043 and supports DCN Measurement for data center network performance monitoring. |
| HMP | 65044 | 12.2 | Unknown | Built-in | As needed | hmp operates on port 65044 and refers to a Host Management Protocol used in private network or system control frameworks. |
| PRM | 65045 | 12.2 | Unknown | Built-in | As needed | prm operates on port 65045 and is used by Protocol Resource Manager for managing protocol resources. |
| XNS-IDP | 65046 | 12.2 | Unknown | Built-in | As needed | xns-idp operates on port 65046 and is part of the Xerox Network Systems suite, supporting internetwork datagram processing. |
| TRUNK-1 | 65047 | 12.2 | Unknown | Built-in | As needed | trunk-1 operates on port 65047 and handles core trunk signaling and session control for unified communication systems. |
| TRUNK-2 | 65048 | 12.2 | Unknown | Built-in | As needed | trunk-2 operates on port 65048 and facilitates trunk routing in VoIP or SIP-based communication systems. |
| LEAF-1 | 65049 | 12.2 | Unknown | Built-in | As needed | leaf-1 operates on port 65049 and supports LEAF-1 for primary Lightweight Extensible Authentication Framework tasks. |
| LEAF-2 | 65050 | 12.2 | Unknown | Built-in | As needed | leaf-2 operates on port 65050 and is used by LEAF-2 for secondary Lightweight Extensible Authentication Framework operations. |
| RDataP | 65051 | 12.2 | Unknown | Built-in | As needed | rdatap operates on port 65051 and supports Remote Data Access Protocol for remote data retrieval. |
| IRTP | 65052 | 12.2 | Unknown | Built-in | As needed | irtp operates on port 65052 and refers to a proprietary or experimental real-time transport protocol used in secure environments. |
| ISO-TP4 | 65053 | 12.2 | Unknown | Built-in | As needed | iso-tp4 operates on port 65053 and supports ISO TP4 (Transport Protocol Class 4) communication in OSI-compliant systems. |
| NETBLT | 65054 | 12.2 | Unknown | Built-in | As needed | netblt operates on port 65054 and is used for high-speed bulk data transfer in the NETBLT (Network Block Transfer) protocol. |
| MFE-NSP | 65055 | 12.2 | Unknown | Built-in | As needed | mfe-nsp operates on port 65055 and is used by McAfee Firewall Enterprise for NSP (Network Security Platform) data feeds. |
| MERIT-INP | 65056 | 12.2 | Unknown | Built-in | As needed | merit-inp operates on port 65056 and supports information processing protocols developed by MERIT for academic networks. |
Was this information helpful?