RD Remote Apps/TS Gateway with ISA 2006 and RSA authentication

I am trying to build a TS Gateway solution that uses RSA authentication for PCI compliance
of our remote access tools. I have followed the solution in the link below but the solution that
is detailed is flawed. It uses the same listener for both rules so ISA blocks the connection for
Remote Apps and TS gateway.

Basically I am trying to use remote apps and/or TS Gateway with RSA in a fashion where users
arent able to bypass the 2 factor by creating an RDP icon to connect to machines via the Gateway.

The rule works if its set to All Users instead of All Authenticated Users. When you launch a remote
app or TS Gateway from the Web Access page, the initial request is sent as Anonymous so ISA
blocks it as it needs requests to be authenticated.

I've racked my brain on it and Msft hasnt been able to help me with this either. I know this can work
just looking for someone who has implemented that might be able to get me over the hump.

Thanks