access to web through firewall client without web proxy .how?

We have domain isa in our network .we want domain client access to internet but workgroup client doesnt access to web.
Is possible access to web without web proxy ?
Is possible access to web with firewall client?
If user password in workgroup browser once set ,client access to web and this is undesirable.
thank you.