If you don't currently have a hardware firewall instead of using a hacked together product like ISA, why not spend $650 on a Cisco ASA 5505?