Another excellent document for protecting Exchange with ISA Server
Application Layer Firewall protection for Exchange Server 2003 with ISA Server 2004
And reinforcing a post from last month:
“We do not recommend placing an Exchange front-end server in a perimeter network because it is not designed to be a security context, and it requires extensive connectivity to Active Directory and the Exchange back-end servers.”
