The Windows full client is designed for use on any user's device, but it requires administrator rights to install.
The full client supports auto-update. When the user allows it, the update will be applied. To disable the auto-update feature, see the Updating Clients section.
The Windows full client also includes auto-start and remember-me functionality, so it can automatically connect the user at boot time without any user interaction required.
The Windows full client uses standard executables.
Installing the Windows full client
When the installer .exe is run normally (when a user clicks it), then the full client will be installed. The auto-start option will be enabled for the current user. To disable auto-start, install the client using the command line during which you can disable the feature.
If you try to install the full client on top of the lite client, the lite client will be uninstalled and full client installed. The settings for the lite client will be discarded.
If you experience issues installing the TUN driver when other drivers or certain security software are installed, you can check your installation with the following command:
driverquery /v | findstr wintun
Uninstalling the Windows full client
You can uninstall the Windows full client in the following ways:
Right-click on AppGate ZTNA in the start menu and click Uninstall
Run the installer from the command line using the
/zoptionUse the Add or Remove Programs option in Windows
Starting the client with the command line
Once installed, when Appgate SDP.exe is run normally (when a user clicks it), then the full client launches.
It is also possible to pre-install the profile link at this time and remove all subsequent user interactions required. By example; to pre-install a client profile (so the users will be at the sign-in form) run:
"appgate sdp.exe" --url="appgate://controller.myco.com/profilename..." --novalidate
When the .exe is run from the command line then the following options switches may be added (precede each with a space):
--help | Show help |
--url="appgate://controller.myco.com/profilename..." | Adds the new profile profile name |
--novalidate | Used with --url; this option adds the new profile and skips the profile acceptance steps and goes straight to the user sign-in form. |
--loglevel level | Levels are: Error, Warn, Info, Debug [default is: Info] |
--version | Lists the version information. |
Logs
Log Type | Location |
|---|---|
Client installer logs |
|
Client uninstaller logs |
|
Client updater logs |
|
Driver logs | In the separate, AppGate ZTNA driver:
|
Client logs |
For example:
At the end of every day, a log-date and a ui-date record is archived for 30 days.
|
Log Level
There are two ways to increase the log level and capture more detailed logs in the client:
Quit the client and from
%programfiles%\appgate sdp\ui\run:& ".\appgate sdp.exe" --loglevel <value>In the registry (regedit.exe), add a string
<value>calledLogLeveltoComputer\HKEY_LOCAL_MACHINE\SOFTWARE\Appgate
The <value> options are:
DumpTraceDebugInfoWarnErrorFatal
Info is the normal setting. Moving to the right will reduce the amount of log records saved. Moving to the left is not recommended unless instructed to do so by AppGate support.
To return to normal, quit the client and restart.
.png?sv=2022-11-02&spr=https&st=2026-04-17T03%3A27%3A01Z&se=2026-04-17T03%3A39%3A01Z&sr=c&sp=r&sig=VC56Lz0cRtVv7EGeW3h7h%2FNZ%2FPMP1tcV96dsksYLG3Q%3D)