Client/Server and Generic Application Publishing

Client/Server and Generic applications fall into legacy application type and can be quite complicated. These types of applications tend not to be web friendly by nature and require additional components to communicate between client and server outside of the browser. A similar example for this type of application is VPN and end-to-end tunneling to define IP/Port to pass along the data.

TAC has great flexibility in publishing generic client/server applications using its unique client/server application template. This template allows publishing a wide variety of client server applications.  Regardless of whether it is custom or standard, TAC treats all of them in the same way. This single template is able to handle multiple backend servers and multiple IP/Port ranges. Publishing client/server applications is straightforward. 

To publish your Client/Server application, do the following: 

  1. Click Add in Application section of your site.  

  1. Select Generic client/server application from Client/Server dropdown menu; click Next 

  1. Enter Application name, click Next. 

  1. Enter server application properties. Enter list of servers that should be accessible on client devices. The entries must be in one of the following formats: 

  1. Server_Name: Port ( 1234) 

  1. Server_NameStart_Port – End_Port ( 1200 – 2000) 

  1. IP: Port ( 

  1. IP: Start_Port – End_Port ( 1200-2000) 

  1. IP/Subnet: port ( 3389) 

  1. IP/Subnet: Start_Port – End_Port ( 1200-2000) 

  1. Enter the executable and executable path when the application starts on client device. You have to enter x86 or x64 field based on the executable type. 

  1. Click Next. 

  1. Select Authorization and Access Policy under Security, click Next. 

  1. Configure and verify portal link settings, click Next. 

  1. Click Finish. 

Remember to apply configuration in TAC to take effective changes. When you try to access the site using your client browser, you may be prompted to download TAC Client Service component and you have to install it in order to work Client/Server, VPN applications. 

To work Client/Server and Generic Applications, users require to install TAC Client Services on their end-points. When they initialize the application for the first time the TAC site will prompt to install TAC Client Component (TAC CS) on their endpoints. When there is TAC CS involved the endpoint must have valid trusted system certificate for proper communication.  

VPN and other generic applications are tunneling the traffic securely to the TAC Gateway and beyond. TAC will make the connection secure by trusting the certificate installed on user endpoints.  If you use self-signed (certificate issued by custom CA) certificates for TAC sites, CA that issued cert has to be added to Trusted Root CA under Local Computer on end-point in order to work TAC CS properly.