Checkpoint Firewall and ISA Server

How do you implement ISA Server with an existing Checkpoint firewall setup? Battling to get IP forwarding working, should I start by setting IPSec on Checkpoint or just use the proxy of ISA to be set up on checkpoint?