Re: What is the diff between SecureNAT and the ISA FW client?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Steve Foster [SBS MVP] (steve.foster_at_picamar.co.uk)
Date: 10/06/04 

Date: Tue, 05 Oct 2004 17:59:26 -0700

SuperGumby [SBS MVP] wrote:

> an ISA Firewall Client is a PC which has the ISA Client installed.
> The ISA client intercepts WINSOCK calls and forwards them to the ISA
> Server which acts on the client's behalf.
>
> A SecureNAT client does not have the ISA FC installed (or has it
> disabled or in some cases the application may not pass through
> WINSOCK normally so is treated as a SNAT). An SNAT client uses ISA as
> its default gateway.

Anything that doesn't go through winsock is not going to talk to the
net!

> ISA FC clients obey protocol rules.
> ISA SNAT clients rely on packet filters on the server.

Nope, SecureNAT clients use protocol rules too.

>
> ISA proxy clients (yep, the third kind) request the ISA proxy to
> obtain information on their behalf.

Web requests from secureNAT and Firewall clients should get converted
to web proxy requests automatically within ISA. There are circumstances
where this can fail and cause problems, but fortunately this is fairly
rare. 

-- 
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

Relevant Pages

  • RE: need to access web-based printserver interface from client worksta
    ... by default the ISA web proxy clients will submit all ... request to web server. ... 'Microsoft Firewall' service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing VPN Error 619
    ... I've checked in local network rules and I do have a rule called VPN clients ... PPTP clients are configured to use ISA as a hop to the Internet ... SecureNAT Clients while still trying to have Web and Firewall Client ...
    (microsoft.public.isa.vpn)
  • Re: Open Ports 25 & 110 on ISA Clients
    ... done through the firewall clients. ... Basically a firewall client is a machine running the ISA Firewall Client ... SNAT clients are those clients that have ISA in the routing ...
    (microsoft.public.isaserver)
  • Re: ISA server 2004 and Bluecoat proxy
    ... second as i told you ((http web proxy filter)) is designed for ( ... SecureNAT,Firewall clients) and you can disable it. ... the only problem that i have that many erros appear in ISA state that WEb ... server that is configured as firewall server. ...
    (microsoft.public.isa.configuration)
  • Re: ISA 2006 in basic web proxy mode query
    ... The LAN router cannot be assigned to use ISA ... I think my only option here is to push proxy IP ... If you do need SecureNAT Clients then you have no choice,...ISA must be the ... install the firewall client on desktops pc just yet? ...
    (microsoft.public.isaserver)