Cisco pix hardware firewall.
Cisco managed switch
5x servers / Mail server, file server, PDC, BDC Internet server (isa)
Ms isa server with 3 nics ( wan , lan , dmz ) on gateway behind router
Belking 54g (or 11g

if you like ) wap
2 belkin wireless cards one pci with ext ant one pcmcia for laptop 54g 11g
IDS shell on pix firewall - sending to internal syslog server
Kerio personal firewall on each client for aplication level control

Cisco kicks bottom !!!
AND -- Nearly all of it payed for by work
- Deactivate big head mode -