At last if You SCCM agent is initiating communication to get the updates, you don't need ISATAP. You only need ISATAP if you wan't to establish communication from internal network to DirectAccess clients located on Internet.
BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx