Dr. Tom Shinder's ISA Server and Beyond: Real World Security Solutions for Microsoft Enterprise Networks

ISA Server allows you to control what internal network clients can access on the Internet and what external, Internet-based clients can access on the internal network. You are "publishing" servers when you configure the ISA server to allow external network clients access to resources on the internal network. ISA Server supports two types of publishing:
Web publishing
Server publishing
Web publishing rules publish HTTP and FTP servers located on the internal network, and give you the ability to do the following:
Publish multiple Web servers using a single IP address on the external interface of the ISA server.
Use an Incoming Web Requests listener to accept inbound HTTP requests.
Authenticate with the ISA server at the Incoming Web Requests listener using basic, integrated, digest or certificate authentication.
Perform port redirection. Only the Web Proxy service can accept requests on a specific port on the external interface of the ISA server and forward it to an alternate port on an internal server.
Examine the HTTP header and make decisions on how to redirect the request based on the destination URL.
Bridge Secure Sockets Layer (SSL) requests as HTTP requests. This reduces processing overhead on the internal Web server and allows the ISA server to handle the SSL processing.
Bridge SSL requests as SSL requests. This allows the ISA server to terminate an SSL connection on its external interface and then create a second SSL connection between its internal interface and the Web server on the internal network.
Extend the security...