Problem seemed to be with HTTP Compression: once I turned it off the
site loaded just fine. Beware, unlike most ISA/TMG changes, this
didn't apply quite immediately (and no, I don't have caching turned
on); if you have the same problem as I was having, wait a couple
minutes after you make the HTTP Compression change before testing the
problematic website.