TR7 Bundles — pre-grouped product sets for enterprise scenarios.

BASE BUNDLE

Application Delivery and Identity-Based Access

Enterprise application delivery and access management should no longer be two separate operations.

In the traditional architecture, publishing the application was one problem and controlling user access was another: different products, different consoles, different policies. Hybrid work, opening legacy applications to external users, contractor access, and modern authentication needs no longer fit that split.

TR7 Base Bundle brings application delivery and access management onto one platform. ADC publishes the application, distributes traffic, and watches service health. AAM evaluates every access request against identity, session, and service policy. They run on the same operator UI, the same backend-services pool, and the same policy model — no integration complexity, no fragmented operations.

Right Application. Right User. One Platform.

TR7 Base Bundle brings together ADC, which carries the application, and AAM, which governs access — on the same platform. Applications are published securely, user access is identity-controlled, and operations run from one place.

WHY THIS COMBINATION

Delivery and Access Are Two Parts of the Same Decision

In modern application traffic, it isn't only where the request should go that matters — it's also who's making the request, what they're entitled to, and which policy applies. TR7 Base merges ADC and AAM into the same policy model and makes this decision on one platform.

One decision, one platform

Whether a user reaches the application is not independent of traffic distribution. Identity, session context, MFA state, and service policy are evaluated within the same decision flow. In TR7 Base, this flow isn't synchronized across two products; it runs on one platform.

One service and policy model

Backend-service pool, certificate store, health checks, and traffic rules are defined in one place. The same definitions are shared by the delivery and access layers. You don't manage two inventories, two health-check sets, or two certificate lifecycles.

One audit trail

Who the request came from, which MFA step it cleared, which application it reached, and which backend service answered — all tracked in one stream. Compliance and audit teams no longer need to stitch fragmented logs after the fact.

One operational discipline

Delivery and identity teams work from the same operator UI. Policy changes apply through a shared rule logic. Classic integration risks — delivery changes breaking access, identity policy disrupting traffic routing — go away.

USE CASES

Four Scenarios Where Base Bundle Is at Its Strongest

The ADC + AAM combination solves the most common problems organizations face in application delivery and access management — together. In every scenario the application is published, access is identity-controlled, and operations run on one platform.

Securely opening internal apps to external access

Legacy applications without modern identity support are placed behind SSO and MFA without touching the code. ADC prepares the application for external access; AAM manages the login layer so only authorized users reach it.

Contractor and partner access

Instead of putting external users on the whole network via VPN, route them only to the applications they're authorized for. AAM serves a branded access portal, ADC carries the traffic, the user sees only the apps they have permission for. Ideal for time-bounded and auditable access scenarios.

Clientless privileged remote sessions

Open RDP, VNC, and SSH sessions through the browser for system administrators, auditors, and service-provider teams. No client installation required; sessions are identity-bound, auditable, and centrally manageable.

Enterprise application publishing in regulated industries

Combine highly available publishing with identity-controlled access for banking portals, insurance agent applications, public services, and healthcare portals. ADC delivers service continuity and traffic control; AAM makes access events auditable.

WHAT'S INSIDE

2 Products + 1 Add-on, One Bundle

Base Bundle delivers ADC and AAM at full capability — plus TR7 ETM, included for 25 endpoints. Traffic delivery, user access, and device visibility all run on one license, from one UI.

TR7 ADC — Application Delivery Controller

The publishing and distribution layer for enterprise application traffic. Publishes HTTP/1.1, HTTP/2, HTTP/3, TCP, and UDP services through one engine.

  • 13 load-balancing algorithms and 9 session-persistence methods
  • 7+ deployment topologies: reverse proxy, transparent insertion, IP-takeover inline included
  • SSL/TLS termination, modern cipher policies, and ACME automation
  • Content-aware traffic rules — without scripting
  • Built-in adaptive L4/L7 DDoS protection and on-device L7 reporting
  • Active health monitoring, per-vService traffic shaping, and hot configuration reload
TR7 ADC details

TR7 AAM — Application Access Manager

The identity and policy layer for enterprise access. Every access request is evaluated against user identity, session context, and service policy.

  • Per-application authentication and a branded Application Access Portal
  • OAuth2, OIDC, SAML, LDAP, RADIUS, and TACACS+ identity infrastructures
  • MFA options: TOTP, SMS, email OTP, and certificate
  • Full L3 remote access with SSL VPN and IKEv2
  • Clientless RDP, VNC, and SSH — clientless access via the browser
  • Login-attack protection, session protection, and self-hosted CAPTCHA
TR7 AAM details
BUNDLED ADD-ON

First 25 Endpoints Included with Base Bundle

Included with Base Bundle25 endpoints · all features unlocked

TR7 Base Bundle adds a 25-endpoint TR7 ETM license alongside ADC and AAM. Beyond distributing application traffic and managing user access, you gain unified visibility into your devices, mobile endpoints, and servers — all from the same platform.

TR7 ETM delivers live telemetry through a single management layer that runs on laptops, phones, and servers. Which device is on which version, whether the security agent is running, who connected from where, and which server is under load — all monitored from one console.

When a device poses a risk, you can run remote commands, pull files, terminate processes, or isolate the device from the network. On the server side, live data — CPU, RAM, disk, and service health — feeds smarter traffic decisions back into ADC.

25 endpoints are included with Base Bundle. Laptops, mobile devices, and servers all draw from the same pool. When you need more, TR7 ETM scales up with 50, 100, 500, 1,000, and unlimited endpoint options.

Explore TR7 ETM
INTEGRATION

Not Two Separate Products — Two Layers of the Same Platform

In TR7 Base, ADC and AAM share the same definitions, the same certificate store, the same health view, and the same operator experience. So integration isn't a project added later — it's how the bundle natively operates.

One backend-services pool

A backend-services pool is defined once; ADC delivery rules and AAM access policies both use the same pool. One inventory, one health check, one change-management process.

One certificate lifecycle

Certificates obtained via ACME or managed through an internal PKI are kept in one store. ADC and AAM use the same certificate source; renewal, tracking, and usage aren't duplicated in two products.

One health view

Active health monitoring is configured once. The delivery and access layers see the same health signal; an unhealthy service is pulled from the traffic rotation and reflected in access decisions.

Hot configuration reload

Rules, profiles, identity policies, and certificates apply without dropping active connections. Because the delivery and access layers run on the same platform, changes flow through in a controlled and consistent way.

BUNDLE vs. BUYING SEPARATELY

One License. No Per-User Counter. No Tier Gating.

Solving application delivery and access management with separate products grows your licensing, integration, audit, and operations cost. TR7 Base simplifies these two foundational layers under a single bundle.

One license, no per-user uplift

ADC and AAM capabilities ship in one bundle. No additional access cost tied to concurrent-user count, access-user count, or a separate module license.

No tier gating — access capabilities are standard

SSO, MFA, SSL VPN, IKEv2, clientless RDP/VNC/SSH, and login-attack protection are standard in the Base Bundle. You don't have to climb to a higher tier to get the baseline access surface.

Certificates, service pools, and policy defined once

You don't recreate the same certificate, the same backend-service pool, or the same access policy in two separate products. Definitions are made once and used together by the delivery and access layers.

On-prem control, no cloud dependency

Identity, session, access, and traffic data are processed in your own infrastructure. Data-sovereignty and regulatory expectations are met without depending on third-party ZTNA cloud services.

Not an integration project — out-of-the-box platform behavior

ADC and AAM are parts of the same platform. Service pools, certificates, health checks, and policies are shared directly. Running them together isn't weeks of integration work; it's natural product behavior.

RECOGNITION

Validated by the Teams That Use It

Verified G2 reviews from network engineers, infrastructure architects, platform teams, and enterprise IT leaders.

Verified Review
"With TR7 we consolidated load balancing and access security on one platform. Dealing with two operator UIs and two policy models for two separate products had been an operational drag for years; that drag is now gone."
Infrastructure ArchitectEnterprise (1000+ employees) · Banking
Verified Review
"We were able to put our legacy internal applications behind SSO and MFA without touching the code. We used to need a separate identity product and a separate reverse proxy product for this; with TR7, both run on the same platform."
Senior System AdministratorMid-Market (51-1000 employees) · Public Sector
Verified Review
"We no longer need a separate VPN infrastructure for contractor access. They reach the applications they're authorized for through the AAM portal directly; ADC carries the traffic, and both are managed from one console."
IT ManagerEnterprise (1000+ employees) · Enterprise

See Application Delivery and Access on One Platform

Bring your own application portfolio, identity infrastructure, and access policies. We'll show you how TR7 Base Bundle runs the ADC + AAM layers together from one operator UI in a live demo.