It detects protocols dynamically based on signatures of the protocols. Protocol detection may involve and will generally involve deep packet inspections of the packets coming to and going out of the system.