List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| passgo-tivoli | 627 | 12.2 | Application servers | Built-in | As needed | PassGo-Tivoli integrates privilege escalation with Tivoli systems for secure access control. |
| qmqp | 628 | 12.2 | Network services | Built-in | As needed | Quick Mail Queueing Protocol used to transfer mail between SMTP queues efficiently. |
| 3com-amp3 | 629 | 12.2 | Application servers | Built-in | As needed | 3Com-AMP3 manages media or analytics functions on legacy 3Com devices. |
| rda | 630 | 12.2 | Network services | Built-in | As needed | Remote Data Access protocol used in distributed industrial SCADA systems. |
| ipp | 631 | 12.2 | Printing | Built-in | As needed | Internet Printing Protocol, a standard protocol used for printing over a network. |
| bmpp | 632 | 12.2 | Network services | Built-in | As needed | A protocol for BMPP (Business Management Protocol Processor), processing business data. |
| servstat | 633 | 12.2 | Debugging and measurement | Built-in | As needed | ServStat protocol gathers encrypted status information from web or app servers. |
| ginad | 634 | 12.2 | Network services | Built-in | As needed | GINAD syncs networked industrial diagnostics and asset metadata. |
| rlzdbase | 635 | 12.2 | Network services | Built-in | As needed | RLZ Database sync protocol manages sync of high-speed transaction stores. |
| ldaps | 636 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | LDAPS is the secure version of the Lightweight Directory Access Protocol, running over TLS. |
| lanserver | 637 | 12.2 | Network services | Built-in | As needed | A protocol for LAN Server, serving data in LAN networked systems. |
| mcns-sec | 638 | 12.2 | Tunneling, secure, ssl, pki | Built-in | As needed | This protocol is used for secure tunneling or encrypted communication over networks. It typically supports SSL/TLS, PKI-based authentication, or VPN-like capabilities to ensure confidentiality, integrity, and secure session transport. |
| msdp | 639 | 12.2 | Network services | Built-in | As needed | MSDP discovers multicast sources and supports routing in multicast networks. |
| entrust-sps | 640 | 12.2 | Network services | Built-in | As needed | A protocol for Entrust Secure Policy Server, managing security policies. |
| repcmd | 641 | 12.2 | Network services | Built-in | As needed | Replica Command protocol controls replication commands between database mirrors. |
| esro-emsdp | 642 | 12.2 | Network services | Built-in | As needed | A protocol for ESRO EMSDP (Efficient Short Remote Operations), optimizing remote calls. |
| sanity | 643 | 12.2 | Network services | Built-in | As needed | Sanity check sync protocol ensures integrity of system configuration and settings. |
| dwr | 644 | 12.2 | Network services | Built-in | As needed | A protocol for DWR (Dynamic Web Remoting), enabling dynamic web communication. |
| pssc | 645 | 12.2 | Network services | Built-in | As needed | PSSC protocol transmits control messages between networked power and security systems. |
| ldp | 646 | 12.2 | Network services | Built-in | As needed | A protocol for LDP (Label Distribution Protocol), distributing labels in MPLS networks. |
Was this information helpful?
