I've found some older posts about applications opening behind nal, but no one came back and said anything fixed it. We use nalwin /s /max and its working but the apps come up behind.

Does ir3a fix it?

if it does:

1. can ir3a be applied server side and will the older sp1 agents still work?

2. Can the sp1 nal deliver the patches via an app or will it have to be done via sneaker-net?

If ir3a doesn't fix, has anyone else found another solution?