You can get an ASA 5505 firewall with all the features you'll ever need for a small library installation for about $1200 retail (hell of a lot less if you're buying, say, 50 of them), and any network engineer who can't handle ASA configuration in his sleep should be fired immediately for gross incompetence.

There is no excuse for this insanity.