Install the Firewall client if needing to specify per-user firewall policies or logging.
Remove or upgrade legacy Firewall clients when using ISA Server 2004.
In non-Microsoft, mixed environments, or environments that may not need an additional software component installed on workstations, use the SecureNAT and Web Proxy clients.
Use the Firewall client along with custom protocol definitions if needing to support complex secondary protocols for an application.
Automate the installation of the Firewall client with AD group policy objects, if utilized, and place auto-discovery information in the network to automate the installation and configuration of the clients.