There will be 3 Desktops, 5 Notebooks, 1 All-In-One, 1 Print server, 1 domain controller, 1 Wireless Access Point, I HP switch, 1 SDSL Router, and 1 VPN server on the first floor of our main small business office...
The Internet<-> Netopia4652T SDSL/IDSL Router <->A VPN Server<-> HP Switch
(From HP Switch)<-> A domain controller
(From HP Switch)<-> 3 Desktops
(From HP Switch)<->WAP for Notebooks
(From HP Switch)<->A Print Server<->All-In-One
All-In-One will be connected to a printer Server, then this Print Server, Domain controller, 3 Desktops, WAP will be connected to a HP switch.
I will purchase Netopia4652T SDSL/IDSL Router from our ISP. And this Router includes built-in Firewall function.
We will install Windows 2003 Server Standard Edition onto a VPN server. Therefore this VPN server also will include the built-in Internet Connection Firewall function.
Do I still need to purchase a hardware firewall such as the Cisco PIX Firewall 501, and put it between the Internet and a VPN server?
Am I wrong...??? Could you please correct my mistakes???
Any assistance which you can give me would be gratefully appreciated!
Sincerely,

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic