List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| entrust-kmsh | 709 | 12.2 | Application servers | Built-in | As needed | Entrust-KMSH is the secure key management session handler used in Entrust cryptographic modules. |
| entrust-ash | 710 | 12.2 | Application servers | Built-in | As needed | Entrust-ASH is a secure authentication service handler in Entrust PKI infrastructure. |
| cisco-tdp | 711 | 12.2 | Network services | Built-in | As needed | A protocol for Cisco TDP (Tag Distribution Protocol), distributing tags in Cisco networks. |
| tbrpf | 712 | 12.2 | Network services | Built-in | As needed | Topology Dissemination Based on Reverse-Path Forwarding used in mobile ad-hoc networks. |
| iris-xpc | 713 | 12.2 | Network services | Built-in | As needed | A protocol for IRIS XPC (Extended Procedure Call), extending procedure calls. |
| iris-xpcs | 714 | 12.2 | Network services | Built-in | As needed | A protocol for IRIS XPCS (Extended Procedure Call Secure), securing procedure calls. |
| iris-lwz | 715 | 12.2 | Network services | Built-in | As needed | A protocol for IRIS LWZ (Lightweight Zip), compressing data in IRIS networks. |
| pana | 716 | 12.2 | Network services | Built-in | As needed | Protocol for carrying Authentication for Network Access (PANA) in IP-based networks. |
| netviewdm1 | 729 | 12.2 | Application servers | Built-in | As needed | NetViewDM1 is an IBM NetView module for secure device monitoring in enterprise systems. |
| netviewdm2 | 730 | 12.2 | Application servers | Built-in | As needed | NetViewDM2 extends DM1 with additional performance data metrics. |
| netviewdm3 | 731 | 12.2 | Application servers | Built-in | As needed | NetViewDM3 supports alerts and configuration management in the IBM NetView suite. |
| netgw | 741 | 12.2 | Network services | Built-in | As needed | NetGW protocol bridges legacy and modern protocols in industrial network gateways. |
| netrcs | 742 | 12.2 | Network services | Built-in | As needed | NetRCS enables encrypted remote command and control for enterprise infrastructure. |
| flexlm | 744 | 12.2 | Application servers | Built-in | As needed | FlexLM is a license management protocol widely used across commercial software suites. |
| fujitsu-dev | 747 | 12.2 | Network services | Built-in | As needed | A protocol for Fujitsu device communication, in hardware or peripheral management. |
| ris-cm | 748 | 12.2 | Network services | Built-in | As needed | RIS CM (Resource Inventory Sync - Configuration Management) protocol manages asset records. |
| kerberos-adm | 749 | 12.2 | Network services | Built-in | As needed | A protocol for Kerberos Admin, administering Kerberos networked systems. |
| kerberos-iv | 750 | 12.2 | Network services | Built-in | As needed | A protocol for Kerberos IV, an earlier Kerberos authentication protocol. |
| rfile | 750 | 12.2 | Network services | Built-in | As needed | Remote file protocol supports file transfers in legacy BSD environments. |
| pump | 751 | 12.2 | Network services | Built-in | As needed | PUMP protocol supports provisioning and push updates in mobile broadband systems. |
Was this information helpful?
