In ADUC create an Internet security group. Assign "internet allowed" users to this group.
For your default Site and Content Allow rule in ISA specify "This rule applies to:" "Users and groups specified below" and add the Internet group to the "Applies to requests coming from:" section.
"The Key, The Whole Key, and Nothing But The Key, So Help Me Codd!"