ISA SSL Bridging Port Redirection OWA

Here is a real test for the best.  Perhaps belongs in the secuirty section and the Exchange section.

SBS Server running IIS hosting public web site (Generally not recommneded as port 80 is the most exploited.) also running Exchange 2000 and ISA Server.  I have researched two schools of thought on OWA and SSL (Web Publishing vs. Server Publishing.)  Read all of Thomas Shinder's (ISAServer.org)  articles on the subject and a few others.  

Common SBS Server deployment.
Internet - ISP - Modem - Router - SBS Server
Server is running IIS for the small business's web needs until they can justify hosting.
Server is running Exchange 2000 for centralized mail with OWA enabled for out of office access.
Server has Certificate Services enabled and certificate imported to ISA to facilitate SSL.

Concerns for security drive this question.  Port redirection, is it necessary and if so how should it be implemented.  Port 80 and 443 or just internal redirection.  Do you place all the eggs of the business in the URLScan 2.5 feature of ISA?

With small businesses attempting to cut costs, they are without a doubt opening themselves to some unecessary risks hosting e-mail and web on the very same server as their critical data.  

As an IT professional do you let SBS Serer setup configure Web Publishing and leave it at that?  I have a test network for your ideas and have the follwoing links for your review:

http://www.sbslinks.com/owawithssl.htm
http://www.smallbizserver.net/sbs2000/How_do_I_configure_OWA_with_SSL.aspx
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q290/1/13.ASP&NoWebContent=1
http://support.microsoft.com/default.aspx?scid=kb;EN-US;306802
http://www.isaserver.org/Thomas_Shinder

I will post all my findings here and am looking for anyone's feed back with regard to OWA/SSL experience, ISA experience and SMS Server implementations.  Points are like chocolate and i have a lot of them for the best contributions.

Thanks, MSGeek.