I'm with Sandeep on the Antivirus. I use ESET for the network which has its central server on the server, but the ESET console runs the whole show. It's very nice. But, Sandeep is correct. AV on the server does more harm than good. I suppose some type of malware could move through the network but up to date antivirus scanners should spot them and then isolate the machine. Susan Bradley, the SBS Diva isn't for AV on servers.
Not sure about your setup, but I do like a hardware firewall. Obviously, you can use a combination firewall router like a Cisco PIX. Linksys is always a good choice now that they are part of Cisco.
Just for fun, what ports are your forwarding?
I am not fond of VPNs at all.
