Microsoft's Web page, "Server and Domain Isolation," contains a long list of reference material that can help you improve security through the use of IPSec, and according to Microsoft doing doesn't require costly changes to infrastructure.