Microsoft 2004 User Manual

Page of 263
ISA Server 2004 Configuration Guide 121 
Configuring the Firewall Client 
The Firewall client software enables you to control Internet access on a per user/group basis 
for all Winsock (TCP or UDP) connections to the Internet. The Firewall client software 
automatically sends user credentials in the background to the ISA Server 2004 firewall 
machine. The user accounts can belong to the local SAM on the ISA Server 2004 firewall, or, 
if the ISA Server 2004 and the clients belong to the same Windows domain, then the user 
accounts can be stored in the Windows NT 4.0 SAM or Windows 2000/Windows Server 2003 
Active Directory.  
The firewall client software can be installed from the ISA Server 2004 machine or from 
another machine on the network. If you wish to install the Firewall client software from the ISA 
Server 2004 firewall computer, you must enable a System Policy Rule to allow access to the 
share. A more secure configuration is to install the Firewall client share to a file server on the 
Internal network. 
In the following walkthrough, we will install the Firewall client share on the domain controller 
computer and then install the Firewall client software on the Windows 2000 client computer. 
Perform the following steps to install the Firewall client share on the domain controller 
computer: 
1.  Insert the ISA Server 2004 CD-ROM into the CD drive on the domain controller. In the 
autorun menu, click the Install ISA Server 2004 icon. 
2. On 
the 
Welcome to the Installation Wizard for Microsoft ISA Server 2004 page, click 
Next
3. On 
the 
License Agreement page, select I accept the terms in the license agreement
and click Next
4. On 
the 
Customer Information page, enter your User nameOrganization and Product 
Serial Number. Click Next
5. On 
the 
Setup Type page, select the Custom option. 
6. On 
the 
Custom Setup page, click the Firewall Services entry and click the This feature 
will not be available option. Click the ISA Server Management entry and click the This 
feature will not be available
 option. Click the Firewall Client Installation Share entry 
and click the This feature, and all subfeatures, will be installed on the local hard 
drive
. Click Next