Publishing Team Foundation Server over SSL VPN

I just went through this same situation. I don't know if I did it the most efficient way but I used both Portal Access and Network Access.

For the Portal Access, I created the PAL using Application URI that looked like http://x.x.x.x:port

I did not add any resource items. Next I added the PAL to the visual policy editor under portal access. Assuming your TFS permissions are good, next time you log into the webtop you will see the PAL for TFS.

Next for the clients to us Visual Studio from their local machine, select the Access Policy that that you just edited and under the visual policy editor under network access, add the Access Policy.

Mine is configured as a split tunnel. On the webtop the user will then click the Access Policy you published on the webtop. This will launch a network tunnel. (You should see it come up). Make sure your routing is correct. Then when the client launches VS from the local machine, it will be able to connect to the TFS server that is on the LAN.

I would be interested in knowing if you were able to get this to work a different way.