Today two new and very important articles were published in Tales from the Edge Page. The first one is the official statement about virtualization on ISA (TMG) Server that you can access from the link below:
Security Considerations with Forefront Edge Virtual Deployments
The second one is the new supportability statement about installing ISA Server in a Domain Controller, which you can access from the link below:
ISA Server Branch Office Policies Best Practices: ISA Server co-location with a domain controller
These are really good and excited news in Microsoft Firewall world and definitely you should take some time to read it.
Stay tune that we are always looking for new Tales from the Edge J