With ScreenOS on the SSG the simpliest way to setup a primary and backup ISP is using the backup function under interfaces.
Interfaces > Backup
Set your primary and backup ISP interfaces here and us the carrier DNS address as a ping test source to trigger the failover.
This hold the backup interface down so the alternate default route will be inactive when not needed and the reverse will occur during failover.