I haven't seen anyone mention ISA server
Maybe because Microsoft has tarnished their name for so long now on security that many aren't willing to give them a shot at it. 
But whether you like them or not they do have what appears to be a good writeup about it.
http://www.microsoft.com/technet/isa/2006/perf_bp.mspx
.
