RPC/HTTP on Windows SBS 2003

I’m considering implemeneting RPC/HTTP on a SBS2003 and using an internal certificate.

What security measures should I require as a minimum before implementing?
Is it secure enough if there if the only firewall being used is the ISA on the server?