On my opinion, I would redefine your toology for a security point of view…
Put an ISA 2004 in the DMZ instead of your front end.
I think that you don’t need a F-E
Install Ex2K3 in your internal Exchange server.
Configure correctly Your ISA server and your Exchange server to forward OWA and ActiveSync traffic.
I’m still wandering if clusterd Exchange is worth it!