You have a System Center 2012 Configuration Manager environment running in native mode. You have a perimeter network for your Internet-based site systems. You block the SMB traffic from the…

Fallback status points provide a communication channel for clients that cannot reach a management point - they do not address the authentication and connectivity requirements between the site server and site systems in a perimeter network.

A server locator point helps clients discover a management point when AD and WINS are unavailable - it does not facilitate site server to site system administrative communication across a blocked perimeter.

A Client Connection account is used by Configuration Manager clients to authenticate to site systems when computer account authentication is unavailable - it does not govern site server to site system installation communications.

The Site System Installation Account provides the credentials the site server uses to connect to and install or manage site systems located in the perimeter network. Because SMB is blocked inbound and data transfers are site-server-initiated, the site server must authenticate using this account to push installations and retrieve status from the perimeter site systems; without it, the site server has no way to authenticate across the network boundary.