Secure Network Analytics Default Application Definitions v7.5.0

Cisco Secure Network Analytics

Default Application Definitions 7.5.0

Secure Network Analytics Default Application Definitions

The table in this document lists the default Cisco Secure Network Analytics (formerly Stealthwatch) applications defined on

the Custom Applications page in the Web App. The intended audience for this document includes users who want a clearer

understanding of what comprises a default application that Secure Network Analytics monitors.

In the table below, the number in parentheses after the application name is a unique identifier (UID).

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

3com AMP3 3com AMP3 (719)

Registered with IANA

on port 629

TCP/UDP.

3com TSMUX 3com TSMUX (720)

Registered with IANA

on port 106

TCP/UDP.

ACAP ACAP (722)

The Application

Configuration Access

Protocol (ACAP) is a

protocol for storing

and synchronizing

general configuration

and preference data.

It was originally

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

developed so that

IMAP clients can

easily access address

books, user options,

and other data on a

central server and be

kept in sync across all

clients.

AccessBuilder AccessBuilder (724)

AccessBuilder

(Access Builder) is a

family of dial-in

remote access

servers that give

mobile computer

users and remote

office workers full

access to workgroup,

departmental, and

enterprise network

resources. Remote

users dial into

AccessBuilder via

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

analog or digital

connections to get

direct, transparent

links to Ethernet and

Token Ring LANs-just

as if they were

connected locally.

AccessBuilder

products support a

broad range of

computing platforms,

network operating

systems, and

protocols to fit a

variety of network

environments. They

provide multi-

protocol bridging and

routing for wide area

Client-to-LAN

connections and

remote LAN

extensions to the

central site.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

ActiveX ActiveX (257)

ActiveX is a software

framework created by

Microsoft that adapts

its earlier Component

Object Model (COM)

and Object Linking

and Embedding (OLE)

technologies for

content downloaded

from a network,

particularly in the

context of the World

Wide Web. It was

introduced in 1996

and is commonly

used in its Windows

operating system.

Adobe Connect Adobe Connect (265)

A web conferencing

platform for web

meetings, eLearning,

and webinars.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Adobe EchoSign Adobe EchoSign (713)

EchoSign is a web-

based electronic

signature and

enterprise content

management system

with specific focus on

the document

management and

verification life-cycle.

Its major features

center on document

signing, tracking and

filing. It supports

signing by email (e

signature) or by fax.

Adobe Services Adobe Services (1042)

Adobe Services are

services that sync

files and services in

the Adobe product

suite.

Adult Site Adult Site (1158) Adult sites.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

AFS AFS (573)

A distributed

networked file system

similar to NFS

Sources of id: Palo

Alto Networks,

Packetshaper.

Akamai Cloud Akamai Cloud (873)

Akamai Cloud is a

global content

delivery network.

Alibaba Alibaba (746)

An online business-

to-business trading

platform for small

businesses.

AliExpress AliExpress (1175)

AliExpress is an

online retail service

based in China that is

owned by the Alibaba

Group.

ALPES ALPES (731)

ALPES is a client

server protocol build

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

on top of TCP. Its

main goal is to secure

the administration of

a network of

computers by

transferring

configuration text

files between an

information server

and its clients and

executing programs

on them.

Amazon Alexa Amazon Alexa (1136)

Alexa is a virtual

assistant AI

technology

developed by

Amazon.

Amazon

Appstore

Amazon Appstore (1135)

The Amazon

Appstore for Android

is an app store for the

Android operating

system operated by

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Amazon.com.

Amazon AWS Amazon AWS (1138)

Amazon Web

Services is a

subsidiary of Amazon

providing on-demand

cloud computing

platforms and APIs to

individuals,

companies, and

governments, on a

metered pay-as-

you-go basis.

Amazon Chime Amazon Chime (863)

Amazon Chime is an

enterprise

collaboration service

from Amazon Web

Services.

Amazon Cloud Amazon Cloud (769)

Amazon Cloud

services.

Amazon Drive Amazon Drive (888)

Amazon Drive,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

formerly known as

Amazon Cloud Drive,

is a cloud storage

application managed

by Amazon.

Amazon Echo Amazon Echo (1137)

Amazon Echo

(shortened to Echo) is

a brand of smart

speakers developed

by Amazon.

Amazon Prime

Music

Amazon Prime Music (1134)

Amazon Music is a

music streaming

platform and online

music store operated

by Amazon.

Amazon Prime

Video

Amazon Prime Video (842)

Prime Video, also

marketed as Amazon

Prime Video, is an

Internet video on

demand service that

is developed, owned,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

and operated by

Amazon.

Amazon Redshift Amazon Redshift (1140)

Amazon Redshift is a

data warehouse

product which forms

part of the larger

cloud-computing

platform Amazon

Web Services.

Amazon S3 Amazon S3 (1139)

Amazon S3 or

Amazon Simple

Storage Service is a

service offered by

Amazon Web

Services that

provides object

storage.

Amazon

Shopping

Amazon Shopping (1160)

Online shopping

marketplace.

AMInet AMInet (733)

AMInet Protocol is

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

used for

communication and

control of Alcorn

McBride Inc.

products.

Apple AirPlay Apple Airplay (1147)

AirPlay is a

proprietary protocol

stack/suite

developed by Apple

Inc. that allows

wireless streaming

between devices of

audio, video, device

screens, and photos,

together with related

metadata.

Apple App Store Apple App Store (1146)

The App Store is a

digital distribution

platform, developed

and maintained by

Apple Inc., for mobile

apps on its iOS &

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

iPadOS operating

systems.

Apple Game

Center

Apple Game Center (1170)

Apple Game Center is

an online multiplayer

social gaming

network released by

Apple Inc. It allows

users to invite friends

to play a game, start a

multiplayer game

through

matchmaking, track

their achievements,

and compare their

high scores on a

leader board. Source

of ID: Palo Alto

Networks

Apple GameKit Apple GameKit (1161)

GameKit is a group of

APIs from Apple to

simplify

implementation of

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

gaming features like

leaderboards,

achievements, and

online matches.

Apple

Geolocation

Apple Geolocation (878)

A service provided by

Apple Inc. that

enables users to track

the locations of iOS,

iPadOS, MacOS,

WatchOS devices

and AirPods.

Apple iMessage Apple iMessage

iMessage is an instant

messaging service

developed by Apple

Inc.

Apple Maps Apple Maps(877)

Apple Maps is a web

mapping service

developed by Apple

Inc. It is the default

map system of iOS,

iPadOS, macOS, and

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

watchOS.

Apple Music Apple Music (757)

Apple Music is a

music and video

streaming service

developed by Apple

Inc.

Apple Pay Apple Pay (1194) Apple Pay.

Apple Push

Notification

Apple Push Notification

Apple Push

Notification service is

a platform notification

service created by

Apple Inc. that

enables third party

application

developers to send

notification data to

applications installed

on Apple devices.

Apple Remote

Desktop

Apple Remote Desktop (1148)

Apple Remote

Desktop is an

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

application that

allows you to

remotely manage the

Mac computers on

your network.

Apple Services Apple Services (864)

Apple Services are

application

programming

interfaces developed

by Apple which allow

communication with

Apple Services and

their integration to

other services.

Apple TVPlus Apple TVPlus (1153)

Apple TV+ is a

subscription video on

demand web

television service of

Apple Inc.

Apple TV

Updates

Apple TV Updates (735)

AppleTV updates is a

service that provides

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

updates for the

AppleTV operating

system and its

installed

components.

Apple VPP Apple VPP (4)

The Volume Purchase

Program makes it

simple to find, buy,

and distribute apps

and select books in

bulk for your

institution, so you can

provide great content

to your students,

instructors etc.

AppleTalk AppleTalk (1195) AppleTalk.

Atlassian Atlassian (1196) Atlassian.

authentication

Accountkit (1089) Active Directory (256) Kerberos (47) LDAP

(43) NTLM (763) Other authentication (408) Other Directory

Services (582) Palo Alto (410) PowerBroker (411) SiteMinder

Access control

technologies.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(413) TACACS (174)

Backblaze Backblaze (1121)

Backblaze is a data

storage provider.

Banking Banking (1187) Banking site.

Bitbucket Bitbucket-base (714) bitbucket-uploading (715)

Bitbucket is a web-

based hosting service

for projects that use

either the Mercurial or

Git revision control

systems for their

source code

repositories. This

app-id controls

uploading activities

by bitbucket using

https protocol. To

enforce policies on

bitbucket, respective

repositories must be

allowed. In other

words, if bitbucket is

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

used with GIT, git-

base must be

allowed. Alternately if

it is used with

Mercurial, mercurial-

base must be

allowed.

Bitcoin Bitcoin (895)

Bitcoin is a

cryptocurrency.

BitTorrent BitTorrent (30)

BitTorrent is a

communication

protocol for peer-to-

peer file sharing.

Blackberry Blackberry (167)

The BlackBerry is a

line of wireless

handheld devices and

services. A

BlackBerry can shoot

video, take photos,

play music, and

perform online

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

functions such as

web-browsing and

emailing. They can

also send and receive

push email and

instant messages

while maintaining a

high level of security

through on-device

message encryption,

and are designed to

function as personal

digital assistants.

Blackboard Blackboard (1124)

Blackboard is a virtual

learning environment

and learning

management system

developed by

Blackboard Inc.

BlueJeans BlueJeans (1116)

BlueJeans provides

an interoperable

cloud-based video

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

conferencing service

that connects

participants across a

wide range of devices

and conferencing

platforms.

Box Box (742)

Box, Inc. (formerly

Box.net), is an

American internet

company. The

company focuses on

cloud content

management and file

sharing service for

businesses.

business

systems

360 Total Security (891) AirBnB (867) Akamai Cloud (873)

Altiris (544) Antivirus (549) APC PowerChute (499) apt-get

(545) Auth0 (880) AutoDesk (594) Base CRM (595) Branch

(1103) Cedexis (893) Check Point CPMI (546) CME (945)

CommVault (547) CVS (501) Digicel TopUp (866) distcc

(502) Fubon E-Broker (752) Funk (1044) Git (503) Hightail

(868 ) KACE (548) LearningHub-online (886) Limelight Cloud

Business system

applications help

businesses meet

customer demands

for fast and reliable

delivery of services.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

( 874) Livelink (505) LivePerson (506) Lyft (871)

management (542) Mapbox (892) Middleware (588) Mitake

(749) Mixpanel (1058) Nagios (550) NetBotz (551) Norton

Security (764) other business (498) Parsely (1107) Perforce

(507) Reuters (508) software update (568) StackPath Cloud

(885) storage backup (570) Stratum Mining (897) Subversion

(511) Symantec (894) synology (778) TomTom (869)

Tripadvisor (870) Trulia (872) Uber (758) Wish (879) Yandex

Maps (950) Yandex Navigator (946) Zero (896) ZeroMQ

(898)

Buzzsaw Buzzsaw (599)

Buzzsaw® is data

management

software as a service

(SaaS) that helps

enable Building

Information Modeling

(BIM) workflows. It

includes tools for

documentation,

modeling, and data

management, and it is

integrated with the

Autodesk portfolio of

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

design and data

management

solutions. Access

Buzzsaw securely

from your desktop,

the web, or your

mobile device.

Callidus Callidus (600)

CallidusCloud is a

cloud-based sales,

marketing and

learning solution.

Canvas Canvas (1125)

Canvas a line of

learning management

software. Source of

ID: Palo Alto

Networks.

Chinese Web

Site

Chinese Web Site (1186) Chinese Web Site.

Cisco Comms

and Streaming

Cisco Comms and Streaming (1197)

Cisco Comms and

Streaming.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Cisco Network. Cisco Network (1198) Cisco Network.

Citrix Citrix (31)

Citrix Systems, Inc. is

an American

multinational software

company founded in

1989, that provides

server and desktop

virtualization,

networking,

software-as-a-

service (SaaS), and

cloud computing

technologies,

including Xen open

source products.

Citrix-ica

(unclassified)

Citrix-ica (unclassified)

Applications using

the ports/protocols

normally associated

with Citrix

Independent

Computing

Architecture (Citrix

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

ICA).

Clash of Clans Clash of Clans (1122)

Clash of Clans is a

freemium mobile

strategy video game.

Clash Royale Clash Royale (795)

Clash Royale is a

freemium real-time

strategy video game.

Clearcase Clearcase (136)

The Rational

ClearCase family

consists of several

software tools for

supporting software

configuration

management (SCM)

of source code and

other software

development assets.

It is developed by the

Rational Software

division of IBM.

ClearCase forms the

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

base for configuration

management for

many large and

medium sized

businesses and can

handle projects with

hundreds or

thousands of

developers.

Clearslide Clearslide (601)

Live Pitch & Screen

Share. ClearSlide’s

Live Pitch allows you

to start a presentation

in one click. A

customized link from

which you can

present

presentations, HD

video, live screen

share. Viewer joins by

typing viewer’s link

into their browser. No

download software or

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

plugins to view

presentations.

Cloud storage &

computing

services

iCloud (751) Google Drive (744) Amazon Cloud (769)

A cloud storage

application or

platform that allows

customers to build

and host applications

and websites, store

data, analyze data,

back up files, share

files, print photos,

and more.

Cloud9 Cloud9 (726)

Cloud9 provides an

open source

integrated

development

environment in the

cloud. It supports

more than 40

languages.

Collaborate with their

peers with

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

collaborative coding

features, and web

development

features.

Cloudflare Cloudflare (876)

Cloudflare provides

content-delivery-

network (CDN), DDoS

mitigation, and

Internet security

services.

Collaboration

Foursquare (560) FriendFeed (561) GooglePlus (562) Hi5

(563) internet conferencing (520) Join Me (521) Live Meeting

(522) LotusLive (419) Other collaboration (584) Plaxo (565)

SecureMeeting (523) social business (558) social

networking (559) Tumblr (576) web posting (571)

Collaborative

software or

groupware is

application software

designed to help

people involved in a

common task achieve

goals.

Concur Concur (500)

SAP Concur is an

American SaaS

company, providing

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

travel and expense

management

services to

businesses. Source

of id: Palo Alto

Networks.

Confluence Confluence (1183)

Confluence is team

collaboration

software. Source of

id: Palo Alto

Networks.

Corporate email

Exchange (63) IMAP (34) LotusNotes (218) other email (249)

OutlookMobile (762) POP3 (35) SMTP (36)

Electronic mail, most

commonly referred to

as email or e-mail, is

a method of

exchanging digital

messages from an

author to one or more

recipients.

Coursera Coursera (1199) Coursera.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Crashlytics Crashlytics (889)

Crashlytics helps

collect, analyze and

organize app crash

reports.

CrashPlan CrashPlan (1152)

CrashPlan is an online

backup service.

CRM other CRM (493)

Customer relationship

management (CRM)

is a model for

managing a

company's

interactions with

current and future

customers. CRM

software allows the

organizing of

customer information,

and also provides the

means to track sales

leads from the time

they are obtained

until the sales are

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

closed.

D2D Data

Transfer

D2D Data Transfer (602)

Disk to Disk data

transfer such as

backup operations.

Database other database (586) DB2 (586)

Applications

associated with

databases and

database

management systems

(DBMSs).

Decryption Client Decryption Clients (593) Decryption Client.

DHCP DHCP (25)

The Dynamic Host

Configuration

Protocol (DHCP) is a

network protocol

used to configure

devices that are

connected to a

network so they can

communicate on that

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

network using the

Internet Protocol (IP).

The protocol is

implemented in a

client-server model,

in which DHCP clients

request configuration

data, such as an IP

address, a default

route, and one or

more DNS server

addresses from a

DHCP server.

DHCPFailover DHCP Failover (1200) DHCP Failover.

Digital

Distribution store

Windows Store (755) Google Play (756)

Digital Distribution

store is a digital

distribution platform

or service which

allows users to

browse and

download

applications.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Discord Discord (923)

Discord is a

proprietary freeware

instant messaging

and VoIP application.

Disney Plus Disney Plus (1184)

Disney Plus is the on-

demand, ad-free

streaming service.

Source of ID: Palo

Alto Networks.

DNS DNS (26) Multicast DNS (149)

The Domain Name

System (DNS) is a

hierarchical

distributed naming

system for

computers, services,

or any resource

connected to the

Internet or a private

network. It associates

various information

with domain names

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

assigned to each of

the participating

entities. Most

prominently, it

translates easily

memorized domain

names to the

numerical IP

addresses needed for

the purpose of

locating computer

services and devices

worldwide. By

providing a

worldwide,

distributed keyword-

based redirection

service, the Domain

Name System is an

essential component

of the functionality of

the Internet.

DNS

53 (udp)

Applications using

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(unclassified)

(183)

the ports/protocols

normally associated

with DNS.

Docusign DocuSign (1173)

DocuSign is a

provider of cloud-

based electronic

signature technology

that facilitates

exchanges of

contracts, tax

documents, and legal

materials.

Dota 2 Dota 2 (1159)

Dota 2 is a multiplayer

online battle arena

video game.

Double Take

Availability

Double Take Availability (603)

Vision Solutions'

Double-Take®

Availability: real-time

high availability and

disaster recovery

solution to with

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

options for physical,

virtual or cloud

servers.

Dropbox Dropbox (232)

Dropbox is a file

hosting service

operated by Dropbox,

Inc., that offers cloud

storage, file

synchronization, and

client software.

Dropbox allows users

to create a special

folder on each of their

computers, which

Dropbox then

synchronizes so that

it appears to be the

same folder (with the

same contents)

regardless of which

computer is used to

view it. Files placed in

this folder also are

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

accessible through a

website and mobile

phone applications.

DTK DTK (1201) Deception Toolkit.

DTLS DTLS (1177)

Datagram Transport

Layer Security (DTLS)

protocol provides

communications

privacy for datagram

protocols. DTLS

allows datagram-

based applications to

communicate in a

way that is designed

to prevent

eavesdropping,

tampering, or

message forgery. The

DTLS protocol is

based on the stream-

oriented Transport

Layer Security (TLS)

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

protocol and is

intended to provide

similar security

guarantees. RFC6347

Duo Security Duo Security (1118)

Provides two-factor

authentication,

endpoint remediation,

and secure single

sign-on tools from

Cisco. Source of ID:

Palo Alto Networks.

eBay Zoho (529)

eBay.com is an online

auction and shopping

website in which

people and

businesses buy and

sell a broad variety of

goods and services

worldwide.

eFolder eFolder (716)

eFolder Backup is a

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

business-grade,

cloud backup service

designed for VARs

and MSPs. The

service enables

anytime, anywhere

data backup to the

eFolder Storage

Cloud for Windows,

Mac, or Linux

workstations,

laptops, or servers.

Through file

versioning, eFolder’s

encrypted cloud

backup solution

protects against file

corruption and

accidental save-

overs. Monitoring and

reporting for

eFolder’s cloud

backup solution is

built in.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

ESPN ESPN (235)

ESPN is an American

multinational basic

cable sports channel

owned by ESPN Inc.

Evernote Evernote (553)

Evernote is an app for

note taking,

organizing, task

management, and

archiving.

exacqVision exacqVision (606)

Video Management

System (VMS): Exacq

Technologies is a

manufacturer of video

management system

(VMS) software and

servers used for

video surveillance.

ExpressVPN ExpressVPN (918)

ExpressVPN is a

virtual private

network service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Facebook Facebook (196)

Facebook is an online

social networking

service.

Facebook Cloud Facebook Cloud (890)

Cloud services

provided by

Facebook Inc.

FaceTime FaceTime (739)

FaceTime is a

proprietary

videotelephony

service by Apple.

Fastly Fastly (875)

Fastly is a cloud

computing services

provider.

FCC Speed Test FCC Speed Test (607)

The FCC Measuring

Broadband America

Program's mobile

measurement effort is

an initiative to gather

anonymous data from

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

the smartphones of

thousands of

volunteers in order to

assess broadband

performance

nationwide. Data

related to the radio

characteristics of the

handset, information

about the handset

type and operating

system version, the

GPS coordinates

available from the

handset at the time

each test is run, the

date and time of the

observation, and the

results of active test

are recorded on the

handset.

file hosting

123upload (774) Direct Download Link (248) easypaste-org

(777) HiDrive (585) NW5 (590) rusfolder (775) share-online

File hosting is an

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(770) SunND (592) ultrashare (771) uploaded (776) WDC

(591) yunfile (772)

Internet hosting

service specifically

designed to host user

files. It allows users to

upload files that could

then be accessed

over the internet from

a different computer,

tablet, smart phone or

other networked

device, by the same

user or possibly by

other users, after a

password or other

authentication is

provided.

File Sharing droplr (605) eyvx-com (899) File Sharing (577)

File Sharing

Applications.

filesanywhere filesanywhere (608)

Online file sharing,

data storage, backup

service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Finch Finch (609)

Web page re-

formatting tool Finch

gives you just the text

from any site you plug

into its address box,

stripping Flash,

JavaScript,

stylesheets, and even

images from the

layout.

Finger Finger (81)

The Name/Finger

protocol is an

interface to the name

and finger programs

that provide status

reports on a particular

computer system or a

particular person at

network sites. Due to

security and privacy

concerns, the vast

majority of sites on

the internet no longer

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

offer the service.

FIX FIX (121)

The Financial

Information eXchange

(FIX) protocol is an

electronic

communications

protocol initiated in

1992 for international

real-time exchange

of information related

to the securities

transactions and

markets.

Flickr Flickr (200)

Flickr is an image

hosting and video

hosting website, and

web services suite

that was created by

Ludicorp in 2004 and

acquired by Yahoo in

2005. In addition to

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

being a popular

website for users to

share and embed

personal

photographs, and

effectively an online

community, the

service is widely used

by photo researchers

and by bloggers to

host images that they

embed in blogs and

social media.

Fortnite Fortnite (967)

Fortnite is a video

game in which you

fight off zombie-like

creatures and defend

objects with traps and

fortifications.

Freedome (610) Freedome (610)

F-Secure Freedome:

Security and Privacy

Change your virtual

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

location Prevent ads

and sites from

tracking and block

apps.

FTP FTP (28) TFTP (88) SFTP (117)

File Transfer Protocol

(FTP) is a standard

network protocol

used to transfer files

from one host to

another host over a

TCP-based network,

such as the Internet.

FTP

(unclassified)

(183)

20-21 (tcp)

Applications using

the ports/protocols

normally associated

with FTP.

gambling other gambling (494)

Applications

associated with the

practice of playing

games of chance or

betting in the hope of

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

winning money.

gaming

Apex Legends (987) Asphalt8 (1063) Asphalt9 (1004)

Battlefield (103) Big Farm (1061) Brawl Stars (1047)

CounterStrikeGO (989) Dead Rivals (1052) DeltaDNA (1074)

Doom (98) EAGames (766) Electronic Arts (1024) Enmasse

Games (985) Epic Games (904) Forge of Empires (1032)

Friendster (487) Gameloft-Services (1005) Goodgame

Studios (1035) Half-Life (102) Halfbrick Studios (748) Hatch

Cloud Gaming (1072) IGG(1054) Ingress Prime (1023)

InnoGames (1033) King of Avalon (794) Liftoff (1092)

Lineage 2 (798) Lords Mobile (1055) Minecraft (802) Mixer

(1018) Mobile Strike (797) Modern War (765) MSN-Zone

(104) My5 (1095) Nintendo Network (796) Novatech Core

(1007) other gaming (165) PUBG (1027) QQGame (206)

Quake (97) Second Life (140) SimCity Buildit (799) SOMA

(1060) Source Engine (1096) StarWars Galaxy of Heroes

(800) Streamcraft (1101) TeamSpeak (152) Tencent Games

(1019) Unity (801) Unreal (101) Unreal Engine (1040) Vivox

(970) Warcraft (95) Wargaming-net (936) Wii (107) Wizards

Unite (1036) World of Kung Fu (803) World of Tanks (975)

Activities normally

associated with

recreational pleasure

and enjoyment.

GifBoom GifBoom (611)

GifBoom is a free

Social network

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

application that

enables its users to

upload silent

animated GIFs and to

share them on

GifBoom as well as

Facebook, Twitter,

and Tumblr or via E-

mail or MMS.

Giphy Giphy (814)

Giphy is an online

database and search

engine that allows

users to search for

and share animated

GIF files.

GitHub GitHub (612) GitHub-Base (613) GitHub-uploading (614)

GitHub is a web-

based Git repository

hosting service,

which offers all of the

distributed revision

control and source

code management

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(SCM) functionality of

Git as well as adding

its own features.

Gmail Gmail (213)

Gmail is a free email

service developed by

Google.

GoAgent GoAgent (615)

GoAgent is a GNU

GPL open-source

cross-platform

network access

software. It uses

Google App Engine

servers to provide

users with a free

proxy service to gain

access to blocked

information. It is

normally used with

web browsers.

Google Ads Google Ads (887)

Google Ads is an

online advertising

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

platform developed

by Google.

Google Analytics Google Analytics (884)

Google Analytics is a

web analytics service

offered by Google

that tracks and

reports website

traffic.

Google APIs Google APIs (881)

Google APIs are

application

programming

interfaces developed

by Google which

allow communication

with Google Services

and their integration

to other services.

Google App

Engine

Google App Engine (841)

Google App Engine is

a Platform as a

Service and cloud

computing platform.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Google Calendar Google Calendar (883)

Google Calendar is a

time-management

and scheduling

calendar service

developed by

Google.

Google

Classroom

Google Classroom (717)

Classroom was

designed hand-in-

hand with Google

Apps for Education

teachers to help them

save time, keep

classes organized,

and improve

communication with

students. Students

access Classroom

assignments,

announcements, and

resources online.

Assignment creation

and distribution is

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

accomplished

through Google Drive,

Google's file hosting

service, while Gmail,

Google's webmail, is

used to provide

classroom

communication. Each

class created with

Google Classroom

creates a separate

folder in the

respective Google

Product where the

student can submit

work to be graded by

a teacher.

Google Cloud

Platform

Google Cloud Platform (1120)

Google Cloud

Platform, offered by

Google, is a suite of

cloud computing

services.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Google Docs Google Docs (745)

Google Docs is a

web-based software

office suite by

Google.

Google Drive Google Drive (744)

Google Drive is a file

storage and

synchronization

service developed by

Google.

Google Duo Google Duo (783)

Google Duo is a video

chat mobile app

developed by

Google.

Google Earth Google Earth (862)

Google Earth is a

computer program

that renders a 3D

representation of

Earth based primarily

on satellite imagery.

Google FCM Google FCM (809)

Firebase Cloud

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Messaging, formerly

known as Google

Cloud Messaging, is a

cross-platform cloud

solution for messages

and notifications for

Android, iOS, and

web applications.

Google Hangouts Google Hangouts (616)

Google Hangouts is a

cross-platform

messaging app

developed by

Google.

Google Maps Google Maps (861)

Google Maps is a web

mapping service

developed by

Google.

Google Photos Google Photos (1141)

Google Photos is a

photo sharing and

storage service

developed by

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Google.

Google Play Google Play (756)

Google Play, formerly

Android Market, is a

digital distribution

service operated and

developed by

Google.

Google Play

Music

Google Play Music 91132)

Google Play Music is

a music and podcast

streaming service

operated by Google.

Gopher Gopher (135)

The Gopher protocol

is a TCP/IP

application layer

protocol designed for

distributing,

searching, and

retrieving documents

over the Internet.

Strongly oriented

towards a menu-

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

document design, the

Gopher protocol

presented an

alternative to the

World Wide Web in its

early stages, but

ultimately HTTP

became the dominant

protocol. The Gopher

ecosystem is often

regarded as the

effective predecessor

of the World Wide

Web.

GoToMyPC GoToMyPC (251)

GoToMyPC is remote

desktop software that

allows users to

access computers

remotely using a web

browser.

HACluster HACluster (1204) HACluster.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Hamicloud Hamicloud (617)

Taiwan-based cloud

services.

Healthcare Healthcare (1192)

Online Healthcare

EMR/EHR.

HBO HBO (441)

Home Box Office is an

American pay

television network.

Health Level

Seven

HL7 (105)

Founded in 1987,

Health Level Seven

International (HL7) is

a not-for-profit,

ANSI-accredited

standards developing

organization

dedicated to

providing a

comprehensive

framework and

related standards for

the exchange,

integration, sharing,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

and retrieval of

electronic health

information that

supports clinical

practice and the

management,

delivery and

evaluation of health

services.

HP-iLO HP-iLO (618)

Integrated Lights-

Out, or iLO, is a

proprietary

embedded server

management

technology by

Hewlett-Packard

which provides out-

of-band management

facilities. The physical

connection is an

Ethernet port that can

be found on most

Proliant servers of the

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

300 and above

series.

HTTP HTTP (29)

The Hypertext

Transfer Protocol

(HTTP) is an

application protocol

for distributed,

collaborative,

hypermedia

information systems.

HTTP is the

foundation of data

communication for

the World Wide Web.

HTTP

(unclassified)

(168)

80 (tcp)

Applications using

the ports/protocols

normally associated

with HTTP.

HTTPS HTTPS (39)

Hypertext Transfer

Protocol Secure

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(HTTPS) is a

communications

protocol for secure

communication over

a computer network,

with especially wide

deployment on the

Internet. Technically,

it is not a protocol in

and of itself; rather, it

is the result of simply

layering the Hypertext

Transfer Protocol

(HTTP) on top of the

SSL/TLS protocol,

thus adding the

security capabilities

of SSL/TLS to

standard HTTP

communications.

HTTPS

(unclassified)

(171)

443 (tcp)

Applications using

the ports/protocols

normally associated

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

with HTTPS.

Huawei-dbank Huawei-dbank (619)

Huawei Dbank is a

cloud service

application for storing

and synchronizing

files between

computers.

HULFT HULFT (620)

HULFT is middleware

that performs various

functions based on

the TCP/IP protocol,

including file transfer,

between platforms

connected to each

other via a network.

Hulu Hulu (236)

Hulu is a website and

over-the-top (OTT)

subscription service

offering ad-

supported on-

demand streaming

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

video of TV shows,

movies, webisodes

and other new media,

trailers, clips, and

behind-the-scenes

footage from NBC,

Fox, ABC, TBS, and

many other networks

and studios.

IBM-RMC IBM-RMC (621)

RMC is a content

management system

that provides a

common

management

structure and look

and feel for all

process content. All

content managed in

RMC can be

published to HTML

and deployed to Web

servers for distributed

usage.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

IBM-solidDB IBM-solidDB (622)

BM solidDB: In-

Memory Database

Optimized for

Extreme Speed and

Availability.

iCloud iCloud (751)

iCloud is a cloud

storage and cloud

computing service

from Apple.

ICMP ICMP (27) Echo (169) Echo (unclassified) (900)

The Internet Control

Message Protocol

(ICMP) is one of the

core protocols of the

Internet Protocol

Suite. It is used by the

operating systems of

networked computers

to send error

messages indicating,

for example, that a

requested service is

not available or that a

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

host or router could

not be reached.

IGMP IGMP (130)

The Internet Group

Management

Protocol (IGMP) is a

communications

protocol used by

hosts and adjacent

routers on IP

networks to establish

multicast group

memberships. IGMP

is an integral part of IP

multicast. IGMP can

be used for one-to-

many networking

applications such as

online streaming

video and gaming,

and allows more

efficient use of

resources when

supporting these

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

types of applications.

IGMP is used on IPv4

networks.

iHeartRadio iHeartRadio (1149)

iHeartRadio is a free

broadcast, podcast

and streaming radio

platform.

Imgur Imgur (623/624)

Imgur is an online

image hosting

service.

Industry

AMQP (791) BACNET (793) CoAP (790) DNP3 (792)

S7comm (789)

Software for

automation and IoT.

Insightly CRM Insightly CRM (625)

Cloud-based

customer relationship

management (CRM)

software for small

businesses.

Instagram Instagram (743)

A social networking

app that allows users

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

to share pictures and

videos, either publicly

or privately, to pre-

approved followers.

instant

messaging

AIM (62) APNS (810) cotap (734) Google Allo (811) Google

FCM (809) GoogleTalk (78) ICQ (807) iCrypt (806) IMplus

(260) iO (805) IRC (42) IRC Secure (186) Kakaotalk (580)

LotusIM (217) Meebo (77) MSN Messenger (60) other instant

messaging (184) Paltalk (139) Spark (436) spark-im-base

(681) Tenor (808) Xfire (438) Yahoo IM (73)

Instant messaging

(IM) is a type of online

chat which offers

real-time text

transmission over the

Internet.

internet

Advertising

Adcolony (1059) Adform (1066) Adjust (1010)

AdSafeProtected (1065) Adtiming (1075) AppLovin (1073)

AppsFlyer (1009) Bebi (1083) Brightcove (993) Chartboost

(1088) Criteo (1086) Exactag (1079) Flurry (1076)

FreeWheel (1067) Heyzap (1085) IronSource (1069) Moat

(1064) MoPub (1026) OpenX (1111) Rubicon Project (1112)

ScorecardResearch (1080) SmartAdServer (1078) SpotX

(1068) Swrve (1087) Tapjoy (1053) TrafficFactory (1071)

TrafficJunky (1070) Vungle (969)

Internet advertising.

internet utility

Android Market (524) Apache Jserv (525) Atom (526) other

internet utility (527) DCC Anti-Spam (528) Folding@home

Applications that are

generally of a

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(530) MobileMe (531) Olkla (997) traceroute (534) web

crawler (536) Windows push (537)

utilitarian nature (i.e.,

practical, useful,

functional, sensible).

Intersystems

Cache (626)

Intersystems Cache (626)

InterSystems Caché®

is an advanced

database

management system

and rapid application

development

environment.

Intranet Intranet (237)

An intranet is a

computer network

that uses Internet

Protocol technology

to share information,

operational systems,

or computing

services within an

organization.

IPMobility IPMobility (1206) IPMobility.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

IPFIX IPFIX (788)

Internet Protocol Flow

Information Export is

an IETF protocol. It

was created based

on the need for a

common, universal

standard of export for

Internet Protocol flow

information from

routers, probes and

other devices that are

used by mediation

systems,

accounting/billing

systems and network

management systems

to facilitate services

such as

measurement,

accounting and

billing. The IPFIX

standard defines how

IP flow information is

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

to be formatted and

transferred from an

exporter to a

collector. The IPFIX

standards

requirements were

outlined in the original

RFC 3917. Cisco

NetFlow Version 9

was the basis for

IPFIX. The basic

specifications for

IPFIX are

documented in RFC

7011 through RFC

7015, and RFC 5103.

IPX IPX (129)

Internetwork Packet

Exchange (IPX) is the

OSI-model Network

layer protocol in the

IPX/SPX protocol

stack. The IPX/SPXM

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

protocol stack is

supported by Novell's

NetWare network

operating system.

Because of Netware's

popularity through the

late 1980s into the

mid-1990s, IPX

became a popular

internetworking

protocol.

iQiyi iQiyi (627)

iQIYI is an online

video platform in

China. IT is the

second largest online

video site in China by

number of video

hours played.

ISO-8583 ISO-8583 (628)

ISO 8583 Financial

transaction card

originated messages

— Interchange

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

message

specifications is the

ISO standard for

systems that

exchange electronic

transactions made by

cardholders using

payment cards.

iTunes iTunes (738)

iTunes is a media

player, media library,

Internet radio

broadcaster, mobile

device management

utility, and the client

app for iTunes Store,

developed by Apple

Inc.

Jabber Jabber (61)

Jabber is the original

IM service based on

XMPP and one of the

key nodes on the

XMPP network.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

JDI Online

Backup Storage

JDI Online Backup Storage (629)

Online Backup

solution.

Jenkins Jenkins (630)

Jenkins provides

continuous

integration services

for software

development. It is a

server-based system

running in a servlet

container such as

Apache Tomcat.

JetDirect

(unclassified)

JetDirect (unclassified)

Applications using

the ports/protocols

normally associated

with JetDirect printing

ports.

JIRA JIRA (504)

Jira is a proprietary

issue tracking

product developed by

Atlassian that allows

bug tracking and

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

agile project

management. Source

of id: Palo Alto

Networks.

job search CareerBuilder.com (241) Monster.com (242)

Employment

websites.

Jobvite Jobvite (631)

Recruiting platform

for the social web.

Jump Desktop Jump Desktop (469)

Jump Desktop is a

multi-protocol

remote Desktop

Client (RDP,VNC) that

lets you control your

computer from your

iPad, iPhone or iPod

Touch. Source of ID:

Palo Alto Networks.

Juniper NSM Juniper NSM (632)

Network and Security

Manager (NSM) -

management over the

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

lifecycle of Juniper’s

routing, switching

and security

infrastructure.

Kerberos

(unclassified)

(189)

88 (tcp)

88 (udp)

10000 (null)

100000 (null)

1000000 (null)

Applications using

the ports/protocols

normally associated

with Kerberos.

Khan Academy Khan Academy (633)

Khan Academy is an

educational

organization

providing online

education. All videos

(hosted via YouTube)

are available through

Khan Academy's

website, with

progress tracking,

practice exercises,

and tools for teachers

in public schools.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Khan Academy also

provides a web-

based exercise

system. The exercise

software is available

as open source under

the MIT license.

Kik Kik (1131)

Kik Messenger,

commonly called Kik,

is a freeware instant

messaging mobile

app.

Laiwang

(634/635)

laiwang-base (634) laiwang-file-transfer (635)

Alibaba Group -

Laiwang, a social

networking service -

instant messaging -

file sharing.

Landesk landesk-base (636 landesk-inventory (637)

LANDESK Software

provides systems

management,

security

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

management, service

management, asset

management, and

process management

solutions.

LDAP LDAP (43)

LDAP stands for

Lightweight Directory

Access Protocol.

LDAP

(unclassified)

(183)

379 (tcp)

389 (tcp)

389 (udp)

636 (tcp)

636 (udp)

Applications using

the ports/protocols

normally associated

with LDAP.

LDAPS LDAPS

LDAPS stands for

Lightweight Directory

Access Protocol

Secure over TLS.

LDAPS

(unclassified)

LDAPS (unclassified)

LDAPS stands for

Lightweight Directory

Access Protocol

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Secure over TLS.

Level3 Cloud

Level3 provides cloud

and CDN services.

Lifesize Lifesize (638)

Lifesize, a division of

Logitech, is a video

and audio

telecommunications

company in the

United States which

provides high

definition

videoconferencing

endpoints and

accessories,

infrastructure

products and a

cloud-based video

collaboration

platform.

LinkedIn LinkedIn (216)

LinkedIn is a social

networking website

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

for people in

professional

occupations.

Live Live.com (225)

Windows Live

Personalized

Experience (also

known as

My.Live.com,

previously Live.com)

was a customizable

portal launched by

Microsoft in early

November 2005. It

was one of the first

Windows Live

services to launch.

Livenewschat Livenewschat (639)

LiveNewsChat

provides a web

interface to view text,

image and video

content posted by

third parties.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

LiveNewsChat cannot

and does not screen

the sites or its

contents before

including them in the

results from which

such automated

searches are

gathered.

Localtunnel Localtunnel (640)

Localtunnel lets you

expose a local web

server to the public

Internet.

LogMein LogMein (470)

LogMeIn is a suite of

software services that

provides remote

access to computers

over the Internet.

LSI Raid

Management

LSI Raid Management (641)

LSI is an Avago

Technologies

company - Storage

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

management

software.

Lync Lync (303) DHCP (25)

Lync is an application

from Microsoft that

lets you connect with

others through instant

messaging (IM),

video calls, and online

meetings.

MANET MANET (1205) MANET.

Medical Imaging ACR-NEMA (729)

The American

College of Radiology

(ACR) and the

National Electrical

Manufacturers

Association (NEMA)

formed a joint

committee in 1983 to

develop a standard

to: — Promote

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

communication of

digital image info

rmation, regardless of

device manufacturer

— Facilitate the

development and

expansion of picture

archiving and

communication

systems (PACS) that

can also interface

with other systems of

hospital information —

Allow the creation of

diagnostic

information data

bases that can be

interrogated by a

wide variety of

devices distributed

geographically.

Meetup

meetup-base (642) meetup-email (643) meetup-forum

(644)

Meetup is an online

social networking

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

portal that facilitates

offline group

meetings.

Mendeley mendeley-base (645) mendeley-uploading (646)

Mendeley is a

desktop and web

program for

managing and

sharing research

papers, discovering

research data and

collaborating online. It

combines Mendeley

Desktop, a PDF and

reference

management

application with

Mendeley Web, an

online social network

for researchers.

Mercurial mercurial-base (647) mercurial-uploading 648)

Mercurial is a free,

distributed source

control management

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

tool. Mercurial is a

free, distributed

source control

management tool.

Microsoft Microsoft.com (221)

Microsoft.com is the

main site for product

information, support,

and news for

Microsoft

Corporation.

Microsoft

OneDrive

Microsoft OneDrive (779)

OneDrive is a file

hosting service and

synchronization

service operated by

Microsoft.

Microsoft

OneNote

Microsoft OneNote (1181)

Microsoft OneNote is

a computer program

for free-form

information gathering

and multi-user

collaboration. It

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

gathers users' notes

(handwritten or

typed), drawings,

screen clippings and

audio commentaries.

Source of id: Palo

Alto Networks.

Microsoft

Services

Microsoft Services (865)

Microsoft Services

are application

programming

interfaces developed

by Microsoft which

allow communication

with Microsoft

Services and their

integration to other

services.

Microsoft Teams Microsoft Teams (1117)

Microsoft Teams is a

unified

communication and

collaboration

platform.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Minus Minus (649)

Social media for

location based photo

sharing and chat.

mobile

ActiveSync (166) BOLT (262) FaceApp FunPlus (782) MMS

(164) OperaMini (261) WAP (163)

Mobile devices may

provide telephony as

well as a wide variety

of other services such

as text messaging,

MMS, email, Internet

access, short-range

wireless

communications

(infrared, Bluetooth),

business

applications, gaming,

and photography.

Mobile phones that

offer these and more

general computing

capabilities are

referred to as

smartphones.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Mocha RDP Mocha RDP (1172)

Mocha Remote

Desktop (RDP)

provides access to a

PC running Microsoft

Windows Windows

7/8/8.1/10 and Vista.

Source of ID: Palo

Alto Networks.

Modbus Modbus(1119)

Modbus is a data

communications

protocol for use with

its programmable

logic controllers.

MQTT MQTT (1151)

MQTT is an open

OASIS and ISO

standard lightweight,

publish-subscribe

network protocol that

transports messages

between devices.

MS Exchange

ms-exchange-admin-center (650)

The Exchange Admin

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Admin Center

Center (EAC) is the

web-based

management console

in Microsoft

Exchange Server.

MS Hyper-V VM

Connect x

ms-hyper-v-vm-connect (650)

Virtual Machine

Connection is a tool

that you use to

connect to a virtual

machine so that you

can install or interact

with the guest

operating system in a

virtual machine.

Virtual Machine

Connection is

installed

automatically when

you install the Hyper-

V role.

MS-RPC

(unclassified)

135 (tcp)

1025 (tcp)

Applications using

the ports/protocols

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(183)

1026 (tcp)

135 (udp)

normally associated

with MS-RPC.

MSFT-GC MSFT-GC (1168)

MSFT-GC is

Microsoft (MSFT)

Global Catalog (GC).

Source of ID: NBAR.

MSFT-GC

(unclassified)

MSFT-GC (unclassified)

3268 (tcp)

3268 (udp)

Applications using

the ports/protocols

normally associated

with MSFT-GC;

Microsoft (MSFT)

Global Catalog (GC).

MSFT-GC SSL MSFT-GCSSL (1169)

MSFT-GC is

Microsoft (MSFT)

Global Catalog (GC)

SSL. Source of ID:

NBAR.

Mullvad VPN Mullvad VPN (931)

Mullvad is an open-

source commercial

virtual private

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

network service.

Multicast DNS Multicast DNS (149)

Multicast DNS

(mDNS) protocol

resolves hostnames

to IP addresses within

small networks that

do not include a local

name server.

Multicast DNS

(unclassified)

Multicast DNS (unclassified)

Applications using

the ports/protocols

normally associated

with multicast DNS

(mDNS).

MyFitnesPal MyFitnessPal (143)

MyFitnessPal is a

smartphone app and

website that tracks

diet and exercise.

Mymarket Mymarket (652)

mymarket.com is an

e-procurement

solutions provider.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

MySpace MySpace (201)

MySpace is a social

networking service

with a strong music

emphasis.

NetBIOS NetBIOS (48)

NetBIOS is an

acronym for Network

Basic Input/Output

System. It provides

services related to

the session layer of

the OSI model

allowing applications

on separate

computers to

communicate over a

local area network.

As strictly an API,

NetBIOS is not a

networking protocol.

Older operating

systems[clarification

needed] ran NetBIOS

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

over IEEE 802.2 and

IPX/SPX using the

NetBIOS Frames

(NBF) and NetBIOS

over IPX/SPX (NBX)

protocols,

respectively. In

modern networks,

NetBIOS normally

runs over TCP/IP via

the NetBIOS over

TCP/IP (NBT)

protocol. This results

in each computer in

the network having

both an IP address

and a NetBIOS name

corresponding to a

(possibly different)

host name.

NetBIOS

(Unclassified)

186)

137-139 (tcp)

137-139 (udp)

Applications using

the ports/protocols

normally associated

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

with NetBIOS.

Netflix Netflix (234)

Online video

streaming service.

Netflow Netflow (91)

NetFlow is a network

protocol developed

by Cisco Systems for

collecting IP traffic

information. NetFlow

has become an

industry standard for

traffic monitoring and

is supported on

various platforms.

Netflow

(unclassified)

Netflow (unclassified)

Applications using

the ports/protocols

normally associated

with NetFlow.

NETS NETS (653)

Northern European

Transaction Services

- Nets is a Nordic

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

provider of payments,

cards and information

services.

NetSuite NetSuite (1207) NetSuite.

Network

Management

IPFIX (788) IPMI (787) OpenFlow (786)

Software that enables

administrators to

perform services

such as fault analysis,

performance

management,

provisioning of

networks, maintaining

the quality of service,

etc.

Networking

9pfs (721) ACAS (723) Apple Airport (512) ARCserve (513)

Host Access (587) Infrastructure (514) Internet Protocol

(539) Non IP (576) other protocols (583) PeerGuardian (517)

Proxy (557) RPC (518)

Networking software

facilitates the linking

of two or more

computing devices

together for the

purpose of sharing

data.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

News

CNN (230) FoxNews (231) Google News (229) MSNBC(233)

Yahoo News (228)

Information on

current events which

is presented over the

Internet.

Next Media video

x

Next Media video (653)

Taiwan-based news

service, computer-

animated

dramatizations of

news events.

NFS AFP (115) Lockd (156) NFS (57)

Network File System

(NFS) is a distributed

file system protocol

originally developed

by Sun Microsystems

in 1984, allowing a

user on a client

computer to access

files over a network in

a manner similar to

how local storage is

accessed. NFS, like

many other protocols,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

builds on the Open

Network Computing

Remote Procedure

Call (ONC RPC)

system. The Network

File System is an

open standard

defined in RFCs,

allowing anyone to

implement the

protocol.

Nomadesk Nomadesk (655)

Nomadesk is a

European SaaS

company, focused on

Enterprise File

Sharing &

Synchronization

(EFSS) technology.

Nord VPN Nord VPN (914)

Nord is a commercial

virtual private

network service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

NTP Day-Time (65) NTP (54) Time Server (247)

Network Time

Protocol (NTP) is a

networking protocol

for clock

synchronization

between computer

systems over packet-

switched, variable-

latency data

networks.

NTP

(unclassified)

(185)

123 (udp)

Applications using

the ports/protocols

normally associated

with NTP.

Office 365 Office 365 (741)

Office 365 is a line of

subscription services

offered by Microsoft,

as part of the

Microsoft Office

product line. When

you have an active

subscription, you

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

always have the most

up-to-date version of

the Office

applications, such as

Word, Excel,

PowerPoint, and

others.

Online Storage online storage (301)

Secure online file

storage, file

synchronization,

versioning and

backup services.

OpenMeetings OpenMeetings (656)

OpenMeetings is

software used for

presenting, online

training, web

conferencing,

collaborative

whiteboard drawing

and document

editing, and user

desktop sharing. The

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

product is based on

OpenLaszlo RIA

framework and Red5

media server, which

in turn are based on a

bunch of open source

components.

OpenText

Enterprise

Connect

OpenText Enterprise Connect (657)

OpenText Enterprise

Information

Management

software solutions.

Orkut Orkut (203)

Orkut is a social

networking website

that is owned and

operated by Google.

The service is

designed to help

users meet new and

old friends and

maintain existing

relationships.

Although Orkut is less

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

popular in the United

States than

competitors

Facebook and

Google+, it is one of

the most visited

websites in India and

Brazil.

OSUpdate OSUpdate (1178)

OS update classifies

traffic generated by

the update process of

operating system

updates.

Other

encapsulation

Other encapsulation (1202) Other encapsulation.

P2P file

ANtsP2P (768) Ares (108) AppleJuice (109) DirectConnect

(50) eDonkey (32) Filetopia (80) Gnutella (79) iMesh (131)

Kazaa (33) Kontiki (198) LocalPeer Discovery (785) Manolito

(93) Mute (92) OFF (784) other P2P file (175) Pando (171)

Soulseek (145) spark-im-file-transfer (682) Thunder (161)

Winny (162) WinMX (125)

Applications that

provide file-sharing

services to end-users

on a peer-to-peer

(P2P) network.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

P2P stream

other P2P stream (210) PPLive (113) PPStream (138) QQLive

(205) TVANTS (193)

Applications that

provide streamed

multimedia content to

end-users on a peer-

to-peer (P2P)

network.

Palo Alto Traps Palo Alto Traps (727)

Palo Alto Networks®

Traps provides

Advanced Endpoint

Protection that

prevents

sophisticated

vulnerability exploits

and unknown

malware-driven

attacks. Traps

accomplishes this

through a highly

scalable, lightweight

agent that uses an

innovative new

approach for

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

defeating attacks

without requiring any

prior knowledge of

the threat itself. By

doing so, Traps

provides

organizations with a

powerful tool for

protecting endpoints

from virtually every

targeted attack.

Pandora Pandora (76)

Pandora is a music

streaming and

automated music

recommendation

internet radio service.

PayPal PayPal (761)

PayPal operates a

worldwide online

payments system that

supports online

money transfers and

serves as an

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

electronic alternative

to traditional paper

methods (e.g.,

checks and money

orders.

pcAnywhere pcAnywhere (85)

PCAnywhere is the

protocol of the

PCAnywhere remote

desktop application.

Periscope Periscope (1166)

Periscope is a live

video streaming app

for Android and iOS.

Photo Video Photo Video (578)

Photo-Video

Applications.

Pinterest pinterest-base (658) pinterest-posting (659)

Pinterest is a web and

mobile application

company that offers a

visual discovery,

collection, sharing,

and storage tool.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

PlayStation PlayStation (96)

Services associated

with Playstation

gaming console.

Plex Plex (660)

Plex is a centralized

home media playback

system with a

powerful central

server–the Plex

Media Server–that

streams its media to

many Plex player

Apps.

Pokemon Go Pokemon Go (1144)

Pokémon Go is an

augmented reality

mobile game.

PostScript PostScript (1208) PostScript.

PPPoE PPOoE (124)

The Point-to-Point

Protocol over

Ethernet (PPPoE) is a

network protocol for

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

encapsulating PPP

frames inside

Ethernet frames.

Prezi Prezi (1174)

Prezi is a cloud-

based presentation

software based on a

software as a service

model.

Printer Printer (81)

A printer is a

peripheral which

produces a

representation of an

electronic document

on physical media

such as paper or

transparency film.

Private Internet

Access VPN

Private Internet Access VPN (830)

Private Internet

Access is a

commercial virtual

private network

service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

ProxyLocal ProxyLocal (661)

ProxyLocal could

proxy your local web-

server and make it

publicly available over

the internet. This

software is split into

client and server

parts. Server part is

running on

proxylocal.com

server. Client is

written in ruby and

distributed as gem,

its source code is

open and available on

github.

QNX QNX (1209) QNX.

QQ QQ (204)

encent QQ, also

known as QQ, is an

instant messaging

software service and

web portal.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Quantum Edge

TMS

Quantum Edge TMS (663)

Cloud-based

logistics software.

QUIC QUIC (664)

QUIC (Quick UDP

Internet Connections)

(Google) is an early-

stage network

protocol that runs a

stream multiplexing

protocol over a new

flavor of Transport

Layer Security (TLS)

on top of UDP instead

of TCP.

QUIC

(unclassified)

QUIC (unclassified)

Applications using

the ports/protocols

normally associated

with QUIC.

r-Commands r-commands (211)

BSD r-Commands

BSD r-commands

(211) A set of

commands that was

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

developed for BSD

UNIX to provide

convenient remote

access (access

without passwords)

to operation functions

over a TCP/IP

network. All of the "r"

commands begin

with the letter "r".

Rackspace

Cloud

Rackspace Cloud (882)

Rackspace Cloud is a

set of cloud

computing products

and services from the

US-based company

Rackspace.

Radmin Radmin (474)

Remote Administrator

(Radmin) is a

graphical (GUI)

desktop sharing

software for

Microsoft Windows

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

which uses the Mirror

Video Driver (Video

Hook Driver) to

remotely control

another computer.

Rally Rally Sofware (598)

Rally’s cloud-based,

Agile software

management

platform.

RDP RDP (70)

Remote Desktop

Protocol is a

proprietary protocol

developed by

Microsoft which

provides a user with a

graphical interface to

connect to another

computer over a

network connection.

RDP

(unclassified)

RDP (unclassified)

Applications using

the ports/protocols

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

normally associated

with RDP.

Reddit reddit(760) reddit-base (665) reddit-posting 666)

Reddit, is an

entertainment, social

networking service

and news website

where registered

community members

can submit content,

such as text posts or

direct links.

Remote desktop

Avocent (465) DameWare Mini Remote (467) Netviewer

(472) other remote desktop (463) PocketCloud (473) qq-rdp

(662) R-Services (480) Radmin (474) RDM+ (475)

RemoteCall (476) RemoteView (477) XDMCP (126)

Remote desktop is a

software or operating

system feature that

allows a personal

computer's desktop

environment to be run

remotely on one

system (usually a PC,

but the concept

applies equally to a

server), while being

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

displayed on a

separate client

device.

RingCentral RingCentral (1210) RingCentral.

RIPng RIPng (667)

RIP next generation

(RIPng) is an

extension of RIP-2 for

IPv4. Most RIP

concepts are

applicable in RIPng.

RIPng for IPv6 made

the following changes

to RIP: l UDP port

number: RIPng uses

UDP port 521 for

sending and receiving

routing information.

Routing

BGP (46) RIP (69) EGP (114) EIGRP (120) ISIS (485) LDP

(300) OSPF (87) other routing (484)

Routing is the

process of selecting

paths in a network

along which to send

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

network traffic. The

routing process

usually directs

forwarding on the

basis of routing tables

which maintain a

record of the routes

to various network

destinations.

RPC CORBA (137) ONC RPC (192)

A remote procedure

call (RPC) is an inter-

process

communication that

allows a computer

program to cause a

subroutine or

procedure to execute

in another address

space (commonly on

another computer on

a shared network)

without the

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

programmer explicitly

coding the details for

this remote

interaction. That is,

the programmer

writes essentially the

same code whether

the subroutine is local

to the executing

program, or remote.

When the software in

question uses object-

oriented principles,

RPC is called remote

invocation or remote

method invocation.

RSVP RSVP (68)

The Resource

Reservation Protocol

(RSVP) is a Transport

Layer protocol

designed to reserve

resources across a

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

network for an

integrated services

Internet. RSVP can be

used by either hosts

or routers to request

or deliver specific

levels of quality of

service (QoS) for

application data

streams or flows.

RSVP defines how

applications place

reservations and how

they can relinquish

the reserved

resources once the

need for them has

ended.

rsync rsync 572)

File transfer

application for Unix

systems. Sources of

id: Palo Alto

Networks,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Packetshaper.

RTCP RTCP (67)

The RTP Control

Protocol is a sister

protocol of the Real-

time Transport

Protocol. Its basic

functionality and

packet structure is

defined in RFC 3550.

RTCP provides out-

of-band statistics and

control information

for an RTP session.

RTP RTP (51)

Real-time Transport

Protocol (or RTP)

defines a

standardized packet

format for delivering

audio and video over

the Internet.

RTSP RTSP (52)

The Real Time

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Streaming Protocol is

a network control

protocol designed for

use in entertainment

and communications

systems to control

streaming media

servers.

RTSP

(unclassified)

RTSP(unclassified)

Applications using

the ports/protocols

normally associated

with RTSP.

rsync

rsync (572) File transfer application for Unix systems.

Sources of id: Palo Alto Networks, Packetshaper.

File transfer

application for Unix

systems. Sources of

id: Palo Alto

Networks,

Packetshaper.

Salesforce Salesforce (219)

Salesforce is an

information system

used in CRM

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

marketing and

management that

helps automate some

sales and sales force

management

functions.

SaltStack SaltStack (668)

SaltStack is a Python-

based open source

configuration

management and

remote execution

application.

Supporting the

"infrastructure-as-

code" approach to

deployment and

cloud management.

Samsung

Updates

Samsung Updates (669)

Software updates for

Samsung devices.

SAP SAP 49)

Enterprise software to

manage business

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

operations and

customer relations.

SAPHANA SAP HANA (1150)

SAP HANA is an in-

memory, column-

oriented, relational

database

management system

developed and

marketed by SAP SE.

SCCM Client

Notification

(unclassified)

Applications using

the ports/protocols

normally associated

with SCCM Client

Notification.

SCCP

(unclassified)

Applications using

the ports/protocols

normally associated

with SCCP.

SCCPS

(unclassified)

Applications using

the ports/protocols

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

normally associated

with SCCP.

Screencast Screencast (670)

TechSmith's media

hosting solution for

sharing.

ScreenConnect ScreenConnect (671)

ScreenConnect is a

self-hosted remote

desktop software

application that has

remote support,

remote access, and

remote meeting

capabilities.

ScreenConnect was

developed by

Elsinore

Technologies.

Scribd Scribd (1142)

Scribd is an American

e-book and

audiobook

subscription service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SCTP SCTP (90)

Stream Control

Transmission

Protocol (SCTP) is a

transport layer

protocol (protocol

number 132), serving

in a similar role to the

popular protocols

Transmission Control

Protocol (TCP) and

User Datagram

Protocol (UDP). It

provides some of the

same service features

of both: it is

message-oriented

like UDP and ensures

reliable, in-sequence

transport of

messages with

congestion control

like TCP.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SDRP SDRP (1211) SDRP.

search

Baidu.com (227) Bing.com (222) Booking-com (767)

Google.com (224) Loop Trade Classifieds (780) Wikipedia

(754) Yahoo.com (223) Yahoo Images (238)

Search engines and

websites designed to

find information on

the Internet.

sFlow sFlow (1154)

sFlow is a technology

for monitoring

network, wireless,

and host devices.

sFlow uses sampling

to achieve scalability

and is, for this reason,

applicable to high

speed networks

(gigabit per second

speeds and higher).

sFlow

(unclassified)

sFlow (unclassified)

Applications using

the ports/protocols

normally associated

with sFlow.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SharePoint SharePoint (509)

SharePoint is a web-

based collaborative

platform that

integrates with

Microsoft Office.

Shoutcast Shoutcast (168)

SHOUTcast DNAS is

cross-platform

proprietary software

for streaming media

over the Internet.

Shutterfly Shutterfly (452)

Shutterfly, Inc. is a

photography,

photography

products, and image

sharing company.

Source of ID: Palo

Alto Networks.

Signal Signal (804)

Signal is a cross-

platform encrypted

messaging service.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Silent Circle Silent Circle (672)

Silent Circle is an

encrypted

communications firm

providing

multiplatform secure

communication

services for mobile

devices, desktop and

email.

SIP (unclassified) SIP (unclassified)

Applications using

the ports/protocols

normally associated

with the Session

Initiation Protocol

(SIP).

SIP2 for ILS SIP2 for ILS (673)

The Standard

Interchange Protocol

is a proprietary

standard for

communication

between library

computer systems

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

and self-service

circulation terminals.

Version 2.0 of the

protocol, known as

"SIP2". SIP2 for ILS

(Integrated Library

Systems) for patron

and guest wireless

access.

SIPS

(unclassfied)

SIPS (unclassified)

Applications using

the ports/protocols

normally associated

with SIP Secure. RFC

3261.

Skype Skype (55)

Skype allows users to

communicate with

peers by voice using

a microphone, video

by using a webcam,

and instant

messaging over the

Internet. Unlike most

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

other VoIP services,

Skype is a hybrid

peer-to-peer and

client-server system.

Slack Slack (753)

Slack is a proprietary

business

communication

platform.

Sling TV Sling TV (856)

Sling TV is an

American streaming

television service.

Slingbox Slingbox (143)

The Slingbox is a TV

streaming media

device made by Sling

Media.

Smartsheet Smartsheet (1179)

Smartsheet is an

online project

management,

productivity and team

collaboration

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

software as a service

application. Source of

id: Palo Alto

Networks.

SMB SMB (116)

Server Message

Block protocol traffic.

SMB

(unclassified)

(184)

445 (tcp)

445 (udp)

Applications using

the ports/protocols

normally associated

with SMB.

SMBv1 SMBv1 (1155)

Server Message

Block version 1

protocol traffic.

Source of ID: Palo

Alto Networks.

SMBv2 SMBv2 (1156)

Server Message

Block version 2

protocol traffic.

Source of ID: Palo

Alto Networks.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SMBv3 SMBv3 (1157)

Server Message

Block version 3

protocol traffic.

Source of ID: Palo

Alto Networks.

SMS SMS (250)

Short Message

Service (SMS) is a

text messaging

service component of

phone, web, or

mobile

communication

systems, using

standardized

communications

protocols that allow

the exchange of short

text messages

between fixed line or

mobile phone

devices.

SMTP

25 (tcp)

Applications using

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(unclassified)

(172)

the ports/protocols

normally associated

with SMTP.

Snapchat Snapchat (581)

Snapchat is a

messaging app.

SNMP agentX (730) SNMP (40)

Simple Network

Management

Protocol (SNMP) is an

"Internet-standard

protocol for

managing devices on

IP networks". Devices

that typically support

SNMP include

routers, switches,

servers, workstations,

printers, modem

racks, and more. It is

used mostly in

network management

systems to monitor

network-attached

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

devices for conditions

that warrant

administrative

attention.

SNMP

(unclassified)

(183)

161 (tcp)

161 (udp)

pplications using the

ports/protocols

normally associated

with SNMP.

SNMP-Trap

(unclassified)

(182)

162 (tcp)

162 (udp)

Applications using

the ports/protocols

normally associated

with SNMP-Trap.

SOAP SOAP (510)

SOAP is a protocol for

exchanging XML-

based messages over

a computer network,

normally using HTTP.

Social

Azar (813) Badoo (819) Douyu (1022) ubsmash (818) Easy

Taxi (820) Geocaching (1097) Giphy (814) Gravatar (1106)

Grindr (822) Houseparty (825) Life Church (821) Meetic

Websites and

applications that

enable users to

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Group (823) Sarahah (824) Shazam (817) Smule (826)

create and share

content or to

participate in social

networking.

SolarWinds SolarWinds (1182)

SolarWinds Inc.

develops enterprise

information

technology (IT)

infrastructure

management

software for IT

professionals. Source

of id: Palo Alto

Networks.

SolveQuotes SolveQuotes (675)

SolveQuotes parses

incoming messages,

corporate emails, and

attachments

announcing

inventories up for sale

or lists of securities

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

being liquidated. The

program provides

instantaneous

updates on bids,

offers, price talk,

trades, covers, and

more, resulting in

unparalleled access

to market pricing

when buying, selling,

or marking securities

to market.

SolveQuotes can be

deployed on the

client side so that

proprietary

information never

leaves the firm's

firewalls, and can be

integrated with

proprietary systems

and analytics.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SOTI

MobiControle

soti-mobicontrol (718)

SOTI MobiControl is a

Mobile Device

Management (MDM)

solution for

enhancing enterprise

mobility and enabling

BYOD initiatives.

MobiControl enables

organizations to

centrally manage,

support, secure, and

track corporate-liable

and employee-liable

mobile devices,

regardless of device

type, mobile platform,

and location.

SoundCloud soundcloud-base (676) soundcloud-uploading (677)

SoundCloud is an

online audio

distribution platform

that allows

collaboration,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

promotion and

distribution of audio

recordings by users.

SoundCloud is an

online audio

distribution platform

that enables its users

to upload, record,

promote and share

their originally-

created sounds.

SoundCloud

Uploading lets users

control the action of

uploading music with

a distinctive URL.

SourceForge sourceforge-base (678) sourceforge-file-transfer (679)

SourceForge is a

web-based source

code repository. It

acts as a centralized

location for software

developers to control

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

and manage free and

open source software

development.

SourceForge.net

provides a File

Manager as a means

for projects to make

files available for

download by their

users. In addition to

the web based File

Manager,

SourceForge

provides an

interactive-shell

service for managing

files. Sourceforge File

Transfer captures

different methods to

manipulate/upload

and download the

files and folders

accessible via File

Manager and shell

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

SPAMfighter SPAMfighter (680)

SPAMfighter is a

Spam filter for

Outlook, Windows

Mail, Windows Live

Mail, Outlook Express

and Thunderbird

email clients. It works

to protect all the

email accounts on

your PC against

phishing, identity

theft, and other email

fraud.

SPDY SPDY SPDY.

Speedtest Speedtest (683)

Speedtest is an

application that can

be used by the users

to test their internet

connectivity speed

against hundreds of

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

geographically

dispersed servers

around the world. At

the end of each test,

users are presented

with their download

(the speed of data

from the server to

their computer) and

upload (the speed of

sending data from the

user's computer to

the server) bandwidth

speeds.

Splunk Splunk (1213) Splunk.

Spotify Spotify (259)

Spotify is a digital

music service that

gives you access to

millions of songs.

SQL

Informix (415) MySQL (158) Oracle (160) PostgreSQL (159)

SQL Server (157) Sybase (417)

SQL is a special-

purpose

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

programming

language designed

for managing data

held in a relational

database

management system

(RDBMS).

SQL-server

(unclassified)

(181)

1433 (tcp)

1434 (udp)

Applications using

the ports/protocols

normally associated

with SQL-server.

Srvdir Srvdir (684)

Srvdir makes any

folder a secure public

HTTP file server

which serves the files

from that folder.

Users can share,

download or upload

file from anywhere via

public IP provided.

Srvdir can be useful

for testing static

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

responses to

webhooks.

SSDP SSDP (141)

The Simple Service

Discovery Protocol

(SSDP) is a network

protocol based on the

Internet Protocol

Suite for

advertisement and

discovery of network

services and

presence information.

It accomplishes this

without assistance of

server-based

configuration

mechanisms, such as

the Dynamic Host

Configuration

Protocol (DHCP) or

the Domain Name

System (DNS), and

without special static

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

configuration of a

network host.

SSH SSH (44)

Secure Shell (SSH) is

a cryptographic

network protocol for

secure data

communication,

remote command-

line login, remote

command execution,

and other secure

network services

between two

networked

computers.

SSH/SCP

(unclassified)

(175)

22 (tcp)

Applications using

the ports/protocols

normally associated

with SSH and SCP.

streaming

audio/video

ADNstream (556) ATTServices (1043) AVI (180) BAMTech

Multimedia content

that is constantly

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(596)

Media (1082) BBCNews (1038) BBCServices (1039)

Channel One (846) Crackle (1110) CUSeeMe (199) DAZN

(853) Digicel Music (851) Digicel PlayGo (850) DirecTV

(1090) Disney Radio (1113) Disney Services (1094)

Eurosport Player (1031) Flash (74) Flixster (486) Fox News

(1098) Fox Services (1102) Fox Sports (857) Gaana (952)

HiNet (747) IcFlix (849) iFlix (847) IPTV (155) ITV (402) Ivi-Ru

(845) Joyn (1050) Justin.TV (443) KanKan (843) LeTV (860)

Life_Ru (954) Limelight (444) Livestream (445) Macdome

(859) Megavideo (446) Megogo (971) Metacafe (447) MPEG

(86) Napster (176) Nickelodeon Play (854) OGG (170) other

streaming (208) PBS(1109) Photobucket (449) PPFilm (848)

PPTV (908) Pro7Sat1 Services (1051) Qik (450) QuickTime

(119) Radio-De (1037) Radioplayer (1025) Real (75)

Receiver Radio (1034) Redbox (451) Ren-Tv (961)

Rhapsody (400) Silverlight (401) Simfy (759) Sky Go (844)

Spiegel Services (1030) Spiegel TV (1029) Sportbox-Ru

(994) Streambox (455) Streampix (456) Streaming Audio

(596) TuneIn Radio (852) Turner (858) TVPlayer (974)

TVUPlayer (147) Ustream (457) Verizon Digital Media

Services (1100) vevo (700) Viki (1104) WindowsMedia (148)

Xing StreamWorks(191) Youku (461) youku-base (708)

Youku Tudou (855) youku-uploading (709)

received by and

presented to an end-

user while being

delivered by a

provider.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Streetchat Streetchat (685)

Streetchat, previously

called Gaggle, is an

anonymous “local

message board”

application that

utilizes texts and

photo messages of

the people to

communicate. It uses

a geographical radius

to match individuals,

this app allows users

in a certain radius to

see the same photos

or text posts. There is

also an “upvote” and

“downvote” system

where users can vote

on the quality of posts

either up or down. It

is popular among

high school and

college students for

the ability to post

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

without being

identified.

STUN STUN (182)

STUN is a lightweight

client-server network

protocol. Its purpose

is to allow an

application running

on a host to

determine whether or

not it is located

behind a network

device which is

performing network

address translation.

SurveyMonkey SurveyMonkey (1176)

SurveyMonkey is a

cloud based online

survey service.

SWIPE SWIPE (589) IP Security Protocol.

Symantec-AV

(unclassified)

2967 (tcp)

38293 (tcp)

Applications using

the ports/protocols

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(180)

2967 (udp)

38293 (udp)

normally associated

with Symantec-AV.

Synology Synology (778)

Synology’s

DiskStation Manager

(DSM), a Linux based

software package

that is the operating

system for the

DiskStation and

RackStation

products. The

Synology DSM is the

foundation of the

DiskStation, which

integrates the basic

functions of file

sharing, centralized

backup, RAID

storage, multimedia

streaming, virtual

storage, and using

the DiskStation as a

network video

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

recorder.

Syslog Syslog (53)

Syslog is a standard

for computer data

logging. It separates

the software that

generates messages

from the system that

stores them and the

software that reports

and analyzes them.

Syslog can be used

for computer system

management and

security auditing as

well as generalized

informational,

analysis, and

debugging

messages. It is

supported by a wide

variety of devices

(like printers and

routers) and receivers

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

across multiple

platforms. Because of

this, syslog can be

used to integrate log

data from many

different types of

systems into a central

repository.

Syslog

(unclassified)

(176)

514 (tcp)

514 (udp)

Applications using

the ports/protocols

normally associated

with Syslog.

Syslog-TLS

(unclassified)

Syslog-TLS (unclassified)

Applications using

the ports/protocols

normally associated

with syslog-TLS.

Tableau Tableau (687)

Tableau Software

produces a family of

interactive data

visualization products

focused on business

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

intelligence. Users

can connect to any

type of structured

data, analyze virtually

and produce highly

interactive graphs,

dashboards, and

reports. This app-id

covers Tableau

Desktop, Tableau

Server, and Tableau

Online, which is a

hosted version of

Tableau Server.

TACACS

(unclassified)

(179)

49 (tcp)

65 (tcp)

49 (udp)

65 (udp)

Applications using

the ports/protocols

normally associated

with TACACS.

TeamViewer TeamViewer (243)

TeamViewer is a

proprietary software

application for remote

control, desktop

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

sharing, online

meetings, web

conferencing and file

transfer between

computers.

Telegram Telegram (688)

Telegram is a new

messaging app

where users can

exchange encrypted

and self-destructing

messages, photos,

videos and

documents (all file-

types supported). It is

a cross-platform

messenger whose

clients are open

source. Telegram is

officially available for

Android and iOS

(including tablets and

no-wifi devices).

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Telepresence Telepresence (245)

TelePresence is a

product developed by

Cisco Systems which

provides high-

definition 1080p

video, spatial audio,

and a setup designed

to link two physically

separated rooms so

they resemble a

single conference

room regardless of

location.

Telnet Telnet (37) Reverse Telnet (188) Telnet Secure (38)

Telnet is a network

protocol used on the

Internet or local area

networks to provide a

bidirectional

interactive text-

oriented

communication

facility using a virtual

terminal connection.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

User data is

interspersed in-band

with Telnet control

information in an 8-

bit byte oriented data

connection over the

Transmission Control

Protocol (TCP).

Telnet

(unclassified)

(173)

23 (tcp)

Applications using

the ports/protocols

normally associated

with Telnet.

Teredo Teredo (258)

Teredo is a transition

technology that gives

full IPv6 connectivity

for IPv6-capable

hosts which are on

the IPv4 Internet but

which have no direct

native connection to

an IPv6 network.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Tesla Car App Tesla Car App (689)

The Tesla Motors app

puts Model S owners

in direct

communication with

their cars anytime,

anywhere. With this

app, owners can

perform various

functions remotely

e.g. check charging

progress in real time

and start or stop

charge; lock or unlock

from afar; etc.

TFTP TFTP (88)

Trivial File Transfer

Protocol is a very

simple file transfer

protocol, with the

functionality of a very

basic form of FTP.

TFTP

(unclassified)

69 (udp)

Applications using

the ports/protocols

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(177)

normally associated

with TFTP.

Threema Threema (690)

Threema is an

encrypted instant

messaging

application for iOS

and Android. It can be

used to send and

receive

asymmetrically end-

to-end encrypted

instant messages,

multimedia files and

voice messages.

TikTok TikTok

TikTok is a video-

sharing social

networking service.

Timbuktu Timbuktu (255)

Timbuktu allows for

remote control of

computers.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Tinder Tinder (691)

Tinder is a geosocial

networking and online

dating application.

Tor Tor (177)

Tor or The Onion

Router is open-

source software for

enabling anonymous

communication.

Torch Browser

Torch -browser-base (692) Torch-browser-games (694)

Torch-browser-music (693)

Torch Browser is a

freeware Chromium-

based web browser

and Internet suite

developed by Torch

Media. The browser

handles common

Internet-related tasks

such as displaying

websites, sharing

websites via social

networks,

downloading torrents,

accelerating

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

downloads and

grabbing online

media, all directly

from the browser.

Trello Trello (1180)

Trello is a web-based

project management

application. Source of

id: Palo Alto

Networks.

Trinoo Trinoo (1214) Trinoo.

TrueShare

TrueShare is an

online file system

used to securely

upload, share, store,

backup, and

distribute files.

Services include

online file storage,

online file sharing,

and remote file

backup. TrueShare

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

has the ability to

handle large file

sizes, and unlimited

file types. It is

designed to work

with leading

operating systems

such as Mac,

Windows, and Linux,

as well as major web

browsers.

Tunnel Protocols

GRE (122) GTP (179) IP-in-IP (83) IPSec (41) ISAKMP(134)

L2TP (59) PPTP (89) SSTP(264) TVUPlayer (147)

Tunneling is when

one network protocol

(the delivery protocol)

encapsulates a

different payload

protocol. By using

tunneling one can (for

example) carry a

payload over an

incompatible

delivery-network, or

provide a secure path

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

through an untrusted

network.

Twitch Twitch (696)

Twitch (also known

as Twitch.tv) is a live

streaming video

platform. The site

primarily focuses on

video gaming,

including

playthroughs of video

games by users,

along with broadcasts

of e-sports

competitions.

Content on the site

can either be viewed

live, or viewed on an

on-demand basis.

Twitter Twitter (197)

Twitter is an online

social networking

service and

microblogging

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

service that enables

its users to send and

read text-based

messages of up to

140 characters,

known as "tweets".

Ultrahook Ultrahook (697)

Webhooks are HTTP

requests made over

the web by services

when certain events

are triggered within

the services. Many

popular services

(GitHub, Stripe,

ActiveCampaign,

Papertrail, etc)

support updates via

webhooks. However,

since these webhook

requests are made

over the public web,

it's difficult receive

them when testing

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

from behind a

firewall. Ultrahook

provides a public

endpoint to give to

other services and

tunnels requests to a

private endpoint on

your computer.

Unclassified unclassified (183)

The application

cannot be classified.

Undefined TCP Undefined TCP (405) 1-65535 (tcp)

Applications using

the ports/protocols

normally associated

with TCP.

Undefined UDP Undefined UDP (406) 1-65535 (udp)

Applications using

the ports/protocols

normally associated

with UDP.

uniFLOW uniFLOW (698)

uniFLOW is a

software platform for

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

print, scan, and

device management.

unknown Unknown (71)

The application

cannot be identified.

UPnP UPnP (519)

Universal Plug and

Play (UPnP) is a

standard that uses

Internet and Web

protocols to enable

devices such as PCs,

peripherals,

intelligent appliances,

and wireless devices

to be plugged into a

network and

automatically know

about each other.

Usenet NetNews NNTP (106) NNTPS (187) Usenet

Usenet is a set of

protocols for

generating, storing

and retrieving news

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

"articles" (which

resemble Internet

mail messages) and

for exchanging them

among a readership

which is potentially

widely distributed.

Vagrant Vagrant (699)

Vagrant provides

easy to configure,

reproducible, and

portable work

environments built on

top of industry-

standard technology

and controlled by a

single consistent

workflow to help

maximize the

productivity and

flexibility of you and

your team. Machines

are provisioned on

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

top of VirtualBox,

VMware, AWS, or any

other provider. Then,

industry-standard

provisioning tools

such as shell scripts,

Chef, or Puppet, can

be used to

automatically install

and configure

software on the

machine.

Viber Viber (1130)

Viber is a cross-

platform voice over IP

and instant

messaging software

application.

Vimeo Vimeo (459)

Vimeo is a video

hosting, sharing, and

services platform.

VNC VNC (56)

Virtual Network

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Computing is a

graphical desktop-

sharing system that

uses the Remote

Frame Buffer protocol

to remotely control

another computer.

VNC

(unclassified)

VNC (unclassified)

Applications using

the ports/protocols

normally associated

with VNC.

VoIP

AOL Messenger Audio (736) Blackberry Messenger ( 943)

BOTIM(925) Bria Mobile (999) Bria Teams (1002)

Chatroulette (488) Cisco Phone (244) Fring (153) Google

Duo (783) H323 (82) IAX (128) Iskoot (150) MGCP (123)

Nexx TV (1045) ooVoo (151) other VoIP (207) SIP (110)

Sipviaheader-nat (674) Skinny (111) sipviaheader-nat (774)

TokBox (910) Truphone (154) Ventrilo (266) Voip Video

(579) YeeCall (958)

Voice over IP (voice

over Internet

Protocol, VoIP) is a

methodology and

group of technologies

for the delivery of

voice

communications and

multimedia sessions

over Internet Protocol

(IP) networks, such as

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

the Internet.

VPN Services

Act VPN(992) Actmobile Services (1006) Amaze VPN (968)

AnchorFree Services (1001) AppVPN (978) ArkVPN (966)

Atom VPN (965) Avast Services (913) Avira Phantom VPN

(905) Browsec VPN (984) Buffered VPN (935) CheckPoint

VPN (597) Dash VPN (957) DotVPN (980) DroidVPN (604)

Eagle VPN(998) Easy VPN (993) Encrypt-me (981) Epic

Browser Proxy (833) Fast Secure VPN (973) FastVPNMaster

(1014) Finch VPN(972) FireVPN (924) FrootVPN (942)

GenieVPN (1011) Hi VPN (926) HideMe VPN (917)

HighSpeedVPN (1016) HMAVPN (912) Hola VPN (962)

Hotspot VPN(986) HTTPTunnel (403) IbVPN (960) Inventive

VPNServices (1057) IPVanish(831) Ivacy VPN (929) IVPN

(922) Just Proxy VPN (995) kerio-vpn (725) LinkVPN (982)

Mudfish (1056) Open Super Hotspot VPN (1020) OpenVPN

(84) other tunnel (246) other VPN (178) Proton VPN (915)

Psiphon (828) PureVPN(930) SaferVPN (916) SecureVPN

(1008) Shadowsocks (1003) Shellfire VPN(959)

SnapMaster VPN(1049) Snap VPN (909) SoftEthernet (142)

Speed VPNInventive (944) Speed VPN MobileAppDev (956)

Steganos Online Shield VPN(939) Steganos Services (941)

StrongVPN (934) SuperVPN (940) SuperVPN by Cheng (991)

A virtual private

network (VPN)

extends a private

network across a

public network, such

as the Internet. It

enables a computer

to send and receive

data across shared or

public networks as if

it were directly

connected to the

private network, while

benefitting from the

functionality, security

and management

policies of the private

network.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Surfeasy (902) Tiger VPN (903) Touch VPN (951) TunnelBear

(832) TunnelGuru (919) TunVPN (1012) Turbo VPN (906)

TVUPLayer (147) Unblock Sites (1046) VeePN (996) VPN

365 (988) VPN Area (938) VPNEasy (976) VPNGate (1000)

VPN in Touch (955) VPNMaster (907) VPNMaster by Andro

Team (1017) VPNProxy Master (927) VPNProxy Master

Unlimited (1021) VPNTor Browse (990) VPN Unlimited (911)

VPN Unlimited Proxy (1015) VPNSecure (1091) VPN-X (827)

VyprV928) ZPNVPN (1167) X-VPN (979) Zenmate VPN

(829) ZOOGVPN (928)

Watch ABC Watch ABC (701)

Watch ABC is the

rebranded abc

player, which allows

viewers to access live

streams from a local

ABC affiliate from

within the app,

making ABC the first

U.S. broadcast

network to offer this

ability.

Waze Waze (816)

Waze is a GPS

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

navigation software

app owned by

Google.

Web

Amazon Services (838) Google Shared Services (834) Here

(837) Kinopoisk (835) Loop Caribbean Local News (839)

Loop Pacific Local News (840) My Digicel (836) Vudu (460)

Websites offering

content and

interactive media

services.

WebDAV WebDAV (302)

Web Distributed

Authoring and

Versioning (WebDAV)

is an extension of the

Hypertext Transfer

Protocol (HTTP) that

facilitates

collaboration

between users in

editing and managing

documents and files

stored on World Wide

Web servers.

WebEx WebEx (202)

WebEx provides on-

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

demand

collaboration, online

meeting, web

conferencing and

video conferencing.

Webex Teams Webex Teams (1129)

Webex Teams is a

communications

platform used for file

sharing, video

meetings, white

boarding, calling, and

other services.

Sources of id: Palo

Alto Networks.

Webmail Gmail (213) Hotmail (226) Mail-Ru (781) Yahoo Mail (214)

Webmail (or web-

based email) is any

email client

implemented as a

web application

accessed via a web

browser.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

WeChat WeChat (1127)

WeChat is a multi-

purpose messaging,

social media, and

mobile payment app

developed by

Tencent.

WhatsApp WhatsApp (1126)

Messenger, or simply

WhatsApp, is an

American freeware,

cross-platform

messaging and Voice

over IP service owned

by Facebook, Inc.

WHOIS WHOIS (189)

WHOIS is a query and

response protocol

that is widely used for

querying databases

that store the

registered users or

assignees of an

Internet resource,

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

such as a domain

name, an IP address

block, or an

autonomous system,

but is also used for a

wider range of other

information. The

protocol stores and

delivers database

content in a human-

readable format.

Wickr Wickr (702)

Wickr is a free app

that offers self-

destructing,

encrypted messages.

Text, photo, video

and audio is

encrypted into

indecipherable code

before it leaves the

device. So, it's safely

guarded as it travels

via airwaves and

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

wires to Wickr's

computer servers and

eventually to another

person's device.

Meanwhile, one can

destroy messages by

setting a timer.

Winbox Winbox (703)

Winbox is a small

program that allows

users to control and

monitor Mikrotik

RouterOS using a fast

and simple graphical

user interface.

Windows Azure Windows Azure (1163)

Windows Azure is a

cloud computing

platform and

infrastructure,

created by Microsoft,

for building,

deploying and

managing

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

applications and

services through a

global network of

Microsoft-managed

datacenters.

Windows

Remote

Management

Windows Remote Management (1171)

Windows Remote

Management

(WinRM) is the

Microsoft

implementation of

WS-Management

Protocol, a standard

Simple Object

Access Protocol

(SOAP)-based,

firewall-friendly

protocol that allows

hardware and

operating systems,

from different

vendors, to

interoperate. Source

of ID: Palo Alto

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

Networks.

Windows Update WindowsUpdate (220) BITS (252)

Windows Update is a

service provided by

Microsoft that

provides updates for

the Microsoft

Windows operating

system and its

installed

components,

including Internet

Explorer.

Wink Wink (704)

Wink is a popular

photo sharing

application that lets

users share photos

with friends who are

in proximity. Wink lets

users select

application from any

app - e.g. Instagram.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

WINS WINS (574)

Windows Internet

naming Service

Sources of id: Palo

Alto Networks,

Packetshaper.

Wire Messenger Wire Messenger (812)

Wire is an encrypted

communication and

collaboration app.

Wiredrive Wiredrive (705)

Wiredrive is a cloud

content management

and collaboration

solution for work-in-

progress, asset

management, and

rich media

presentation.

Wiredrive has

become the

application of choice

for creative

professionals in the

advertising, television

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

and motion-picture

industries who need

to upload, manage

and present their

digital media.

WireGuard WireGuard (1145)

WireGuard is a free

and open-source

software application

and communication

protocol that

implements virtual

private network

techniques to create

secure point-to-point

connections in routed

or bridged

configurations.

WordPress WordPress (1105)

WordPress is a CMS

System for multiple

apps and websites.

Wyze Wyze (1185)

Wyze is a U.S.

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

company based in

Seattle, Washington,

U.S. that specializes

in inexpensive smart

home products and

wireless cameras.

The appid covers the

traffic from Wyze

camera to cloud and

mobile traffic for

Wyze cam. Source of

id: Palo Alto

Networks.

X.400 X.400 (706)

X.400 is a suite of

ITU-T

Recommendations

that define standards

for Data

Communication

Networks for

Message Handling

Systems (MHS) —

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

more commonly

known as "email". At

one time X.400 was

expected to be the

predominant form of

email, but this role

has been taken by the

SMTP-based Internet

e-mail. Despite this, it

has been widely used

within organizations

and was a core part

of Microsoft

Exchange Server until

2006; variants

continue to be

important in military

and aviation contexts.

Xbox Xbox (94)

Xbox is a video game

console and service

from Microsoft.

XMPP

XMPP (unclassified)

Applications using

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

(unclassified)

the ports/protocols

normally associated

with The X Window

System. X Windows

is a windowing

system for bitmap

displays, common on

Unix-like operating

systems.

XWindows XWIndows (127)

The X Window

System is a

windowing system for

bitmap displays,

common on Unix-like

operating systems.

XWindows

(unclassified)

XWindows (unclassified)

Applications using

the ports/protocols

normally associated

with The X Window

System. X Windows

is a windowing

system for bitmap

Secure Network Analytics Default Application Definitions

Name

Application Criteria

Description

Secure Network Analytics Classification Port/Protocol

displays, common on

Unix-like operating

systems.

Yahoo Yahoo (1164)

Yahoo! is an

American web

services provider and

search engine.

Yelp Yelp (1123)

Yelp is a crowd-

sourced local

business review and

social networking

site.

Yik Yak Yik Yak (707)

Yik Yak acts like a

local bulletin board

for your area by

showing the most