1st, do you have the ability to get an ISA server? That would be the best security for an External facing SharePoint site. Next, I would purchase a SSL certificate from Verisign and setup the site to include SSL (port 443) so that the forms based authentication passwords don't get sent via clear...