The application (for example, an IMAP and SMTP e-mail, such as Pine) must be configured to connect to the localhost port instead of the application server port.

When the tunneled application connects to the localhost port, the connection is forwarded in encrypted format to the Tectia Server, and from there unencrypted to the application server.