The Firewall Client is primarily designed to handle the proxying of non-HTTP traffic. It inserts itself somewhere in the network stack and transparently works with the ISA Server for internet-bound traffic. If the browser is set to use the ISA Server in its proxy settings, that traffic will still go through the in the traditional way. So, if you have the web proxy set in the browser settings and the FWC is installed, the browser based traffic will hit the HTTP proxy on the ISA Server and get the benefits of that (e.g. caching). The FWC client will just pick up any other thing that tries to get to the internet. If you don’t have the HTTP proxy settings set, the browser will still work, but it will instead go through the FW proxy on the ISA side without the aforementioned benefits of the HTTP proxy.
If you have the HTTP proxy settings in your browser and don’t need any other protocols proxied, then it is not necessary to put the client on the server. From: [email protected] [mailto:[email protected]] On Behalf Of Charles F Sullivan Sent: Monday, November 10, 2014 9:21 AM To: [email protected] Subject: RE: [NTSysADM] Is ISA / TMG client on servers recommended. Someone else may be able to provide more information, but I can tell you that the FW Client agent is not required for ISA/TMG clients to function properly. What the benefits are always seems to be the big question. The only thing I can detect is that you get a little more information about the client when it’s installed. One downside I’ve noticed is that if I make a VPN connection from a machine that has the FW Client installed, the remote firewall (of any type, it seems) will always block my connection (RDP, SMB, etc.). I always have to remember to disable it before I make the VPN connection. That may be a problem for your users if they ever use VPN, though even a non-admin can disable it (and it won’t get re-enabled automatically, even after a reboot, from what I can tell). From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Liby Philip Mathew Sent: Monday, November 10, 2014 4:13 AM To: NT System Admin Discussion Subject: [NTSysADM] Is ISA / TMG client on servers recommended. Hi, I am wondering if ISA / TMG client is required to be installed on Windows servers? What are the pros and cons of installed and not installed? Regards Liby Disclaimer [The information contained in this e-mail message and any attached files are intended solely for the use of the individual or entity to whom they are addressed. This transmission may contain information that is confidential, Path Solutions Private, or exempt from disclosure under applicable law and/or Path Solutions information security policy. The receiver of this communication shall not transmit any part of this message unless the email subject clearly classify it as “Public” or a written permission has been given by the information assets owner. If you have received this e-mail in error, please notify the sender immediately and delete all copies, any disclosure, copying, distribution, or use of the information contained herein is STRICTLY PROHIBITED. Path Solutions accepts no responsibility for any errors, omissions, computer viruses and other defects.] P Protect our planet: Do not print this email unless necessary.
