Application tunnel access with protected workspace

Hi,

 

Is it possible to have application tunnel access with protected workspace?

 

We want to all user access backend server port 22 using putty but disallow winscp.

 

Thanks,

 

Sachin