Surfcontrol is installed on my ISA 2000 server as a plugin at a place I consult for.
All of the PCs are setup as web proxy clients and firewall clients. When they web surf through IE, they are subject to whatever rules the Surf Control filter has in place. However, if they go into IE, and turn off the proxy settings, the internet traffic seems to go through the Firewall client at this point. However, they are no longer subject to the Surf Control filter when only using the firewall client.
Now, while they typically force users to use the web proxy settings in IE forced via Group Policy, it doesn't prevent users with admin access from installing Firefox, setting NO proxy settings, using the firewall client for internet surfing and getting around the filter.
I don't know if this is an ISA issue or Surf Control issue at this point? Can anyone shed some insight? I'm very new to Surf Control. It would seem like, as long as it's a plugin on ISA, whether the internet request comes from a web proxy client, or firewall client, that ISA should pass that request on to Surf Control.... however, that doesn't seem to be the case. ??