Nope, it's a completely different situation.

Imagine that we currently have a "two-pipe" scenario where people are able to do anything that they please because of the second pipe. We'd like to force all traffic to be directed through only one pipe while allowing an alternate route for those who the rule shouldn't apply to.

I suppose that I stressed ISA server too heavily in my question. This is more of a network configuration issue. I should have asked a better question by soliciting advice on locking down the outgoing traffic on your network, as in "how does everyone else do it?".

Thanks for the quick response!