I'm currently running a Windows SBS 2003 with ISA 2000 and will be migrating to a new server containing Windows SBS 2008, Standard Edition.
Since SBS 2008's internal firewall should not be seen as any substitute for an external firewall, I'm looking for feedback as to how to go about and implement a separate firewall to protect my network, given my current hardware and software configuration.
Note: once my old Windows Small Business Server has been demoted from the domain controller, I plan on reusing the old hardware by installing a new operating system.
Hypothetically, is it smart to even attempt to run ISA on the edge of the network with the advent of Forefront Threat Management Gateway 2010?
What hardware or software (or combination of) solutions should I be looking at? I can see things getting rather expensive if opting to buy a new copy of ISA 2006 and a second server license, respectively.
Any insight or possible solutions will be greatly appreciated!