This is my daily job, part of.

"Unlike other products, ISA and TMG firewalls can be configured to work in an almost unlimited number of deployment scenarios. For each scenario, the ISA or TMG firewall brings in a number of options and settings that you have to understand and think about, so that you have the optimal configuration to meet the deployment’s design goals."
 
— Dr. Shinder