If you've got an AD behind the firewall, I'd most definetly recommend the newest ISA. It's a really good and very safe product that will bring you more integration and features than most if not all other firewalls (given the tight integration with AD).
_________________________
The tart is out there