delpaso,
It can be done for a reasonable price.
A few tips:
I would start with the firewall/router. Consider untangle.com (it's free). Create an ISO, install it on a decent PC with two NIC cards and you've got one of the best PC appliances on the market (in my opinion).
It does protocol blocking (ptp), has spam, spyware, phishing, web filter, and virus protection. It basically blocks any harmful website and scans anything downloaded for viruses (including emails). It also has QoS for limiting bandwidth. Keeps the network running very smooth and protects client PC's.
Some wireless access points have client isolation built in.
Select AP's with auto channel select.
Depending on the number of access points you're considering using and the wireless environment, I would suggest doing a wireless site survey. Check out
http://metageek.net/ in the free wireless tools section.
When you configure your access points, disable the lower data rates (1 and 2 meg). This will prevent wireless adapters in the PC's from latching on to a weak signal, especially when roaming.
Don't use WPA in this type of environment. It has an inherent problem (see MIC attack). I would consider WEP or WPA2.
Greg