Chapter 5: ISA 2004 Client Types and Automating Client Provisioning
One of the most misunderstood, but most critical, issues relating to the installation and management of ISA 2004 firewalls is that of ISA 2004 client types. Some of these client types have a classic client/server relationship with the ISA firewall. That is, the client makes a request for data from the server; the server subsequently performs the work of retrieving the data, and returning the data to the client. The client/server relationship is dependent on client software installed on the client computer that makes it possible to communicate with the particular services running on the server.
In the case of ISA, the client might request data in the form of a Web page on the Internet; the ISA firewall would perform the work of retrieving the Web page and delivering it to the client. However, not all ISA 2004 clients have a classic client/server relationship with the firewall, and each client type accesses networks outside its own in a different fashion. In addition, some applications work with one ISA 2004 client type but not with another. It is critical to determine the ISA 2004 client type before you install and configure ISA 2004 firewall. Failure to implement the correct client type can lead to the misconception that the firewall is not working correctly.
All machines connecting to resources by going through the ISA 2004 firewall are considered clients of the ISA firewall. This does not imply that all machines need to have client software installed or need their applications configured to connect directly with the ISA firewall computer. In the context of ISA 2004, the 'client' does not always participate in the classic 'client/server' relationship with the ISA 2004 firewall.