Exchange Behind Firewall?

We are in the process of evaluating Exchange 2000 for IMAP services. Our company has 10 offices statewide and remote users that need access from home and hotels. If we go with Exchange do we setup the server behind the firewall and open the necessary ports or put it in the DMZ and secure it using W2k security?