What is the advantage of using the Firewall client instead of SecureNAT?
With Secure Nat you can only manage by IP (ie machine specific). IE: ISA Server cannot differentiate the user that is login to the system. With the Firewall client, you can control user by their user login and a group they belong to. This translates to finer grain for control and regardless of which PC the user is login from.