If you want ISA for the firewall only, buy a hardware firewall. It'll cost you less (1500 Us per Processor for ISA 2004) and it'll probably be more secure. It's really dependent on your need also. Do you need web caching abilites? VPN Abilites?

Etc Etc