Critique My Network Plans

Hello everyone,


I have set up a small business network (server, 2 lan workstations, 1 wan workstation, 1 wan laptop) I have installed Internet Security 2008 Small Business Edition and everything is working as long as the firewall is disabled on the server.


What I would like to do if feasible:


Set up the server to allow remote access (pc anywhere) from 1 trusted source, run in aggressive mode otherwise.


Set the server and the 2 lan workstations on the trusted setting for the lan.


Set the laptop and 1 wan workstation to untrusted on the wan ( use these for surfing but no file sharing with lan)


I am learning as I go so advice would be appreciated.


Scott