Kind of timely to see that a new guide has been published on microsoft.com titled "Application Layer Firewall protection for Exchange 2003 with ISA Server 2004". It tells you much more than I've been demonstrating in the blogcast series on infrastructure essentials recently, so take a look here.