A co-worker posted an interesting blog about configuring the Windows Server 2008 CA Web Enrollment proxy at

http://blogs.technet.com/askds/archive/2009/04/22/how-to-configure-the-windows-server-2008-ca-web-enrollment-proxy.aspx.