Here’s a great article from Jesper Johansson on assessing security risks with Small Business Server. It dispels the myth that many people have (including myself until I started actually using it and researching it) that SBS (along with the integrated ISA Server) is security-light. And of course, it breaks all of the long held best practices of not putting all of this on the same box …
If you work with SBS or are interested in learning more here are some excellent blogs:
The Official SBS Support Blog also has a great weekly podcast. Something I wish more of the product groups would do.