In my experience Microsoft and secure and not used in the same sentence. In my company they had a contractor sell them an ISA server. I always thought that if Microsoft makes (or acquires) it.. Swiss cheese comes to mind.
Please let me know if ISA is a false sense of security. Or did MS get this one right this time.