Bug? Windows update havn't the ability to use ISA 2004 FWC?

I don't know if this is a bug, but this is a fact.
After testing many times, I have found the following fact about Windows
Update and ISA 2004 FWC.

Windows update on windows XP have not the ability to use ISA 2004 Firewall
Client as the route to Internet, it only can use Secure NAT and Proxy.

If I only use Secure NAT, I can use windows update successfully.

And If I only set proxy in IE, I can use windows update successfully too,
the proxy server can be any, it can be a proxy application installed on the
same PC with windows update, or it can be ISA proxy.

But if I only use ISA server 2004 firewall client, I can reach to the webpage
http://update.microsoft.com/microsof....aspx?ln=en-us

when I click the Express button on this webpage, It will fail. But at this
time if I install a proxy application on the same computer, and set the proxy
settings in IE to point the proxy just installed, then it update
successfully. Because the windows update client control excuted by press the
"Express" button can't use FWC as route, it only have two choices, Secure NAT
and Proxy. The flow route is Windows Update use proxy application just
installed, and the proxy appliction use FWC to go to websit.

It puzzled me, windows update and ISA FWC both are the production of MS, why
Windows Update can't use FWC as route? I hope the fact is not like this.

"David Xiao" <> wrote in message
news:F92A8549-08B2-49BB-9E6A-
....
> But if I only use ISA server 2004 firewall client, I can reach to the webpage
> http://update.microsoft.com/microsof....aspx?ln=en-us
>
> when I click the Express button on this webpage, It will fail.


Have you seen this article about WU and ISA?

<title>KB885819 - You experience problems when you access the Windows
Update Version 5 or Version 6 Web site through a server that is running ISA
Server</title>

When users complain that it used to work the difference is the switch
from WUv4 to WUv5 or WUv6 and the fact that some of the new processes
don't use the client's account when connecting through the proxy server.


HTH

Robert Aldwinckle
---

Yes, I have seen, but this is for Proxy client, I only use FWC, and I have
disable the proxy listen on ISA server 2004 internal NIC. I don't want to use
proxy for my users, I want to use only one client type, it is FWC. I don't
want to use other two client types, web proxy and SecureNAT.

"Robert Aldwinckle" wrote:

> "David Xiao" <> wrote in message
> news:F92A8549-08B2-49BB-9E6A-
> ....
> > But if I only use ISA server 2004 firewall client, I can reach to the webpage
> > http://update.microsoft.com/microsof....aspx?ln=en-us
> >
> > when I click the Express button on this webpage, It will fail.
>
>
> Have you seen this article about WU and ISA?
>
> <title>KB885819 - You experience problems when you access the Windows
> Update Version 5 or Version 6 Web site through a server that is running ISA
> Server</title>
>
> When users complain that it used to work the difference is the switch
> from WUv4 to WUv5 or WUv6 and the fact that some of the new processes
> don't use the client's account when connecting through the proxy server.
>
>
> HTH
>
> Robert Aldwinckle
> ---
>
>
>