Thanks,But I have already solved the problem.
I used the utility "altaddr" to configuring browser ICA to return to client ICA external IP address.And I turn on the option " Use alternate address for firewall connection" on client.
And now everything works alright!
