How to setup SBS2008, Verizon FIOS, Actiontec MI424-WR, and IPCop?

Hello Experts!  As the title implies, I'm wondering how to setup this combo.  I just subscribed to MAPS and got my software (Christmas in March!) so that I can start learning SBS2008, and I'm wondering how to set it up in my house (and eventually in businesses in my community).  It's a little different than SBS2003... :-)

As you know, SBS2008 forgoes the 2 nic / DMZ setup, and *requires* a firewall.  I found IPCop, and it looks swell, and I'd like to try it...but I don't know where to put it in my topology.  Can I put the IPCop box in between the FIOS ONT and the Actiontec MI424-WR?  I really need to keep the Actiontec in the loop because it's also my wireless router, and I do *not* want to spend any money on another WAP when I have a perfectly good one already.

Actiontec support says:

"...if the ONT is connected to the MI424WR via Ethernet (An Ethernet cable will be connected to the routers white WAN Ethernet port), then in most cases even though the MI424WR can not be bridged, it can be removed and another router substituted for it."

I have ethernet from the FIOS ONT to the Actiontec router, and will not be getting FIOS TV (ever), so no chance of needing to change to coax.


So, first question:  is IPCop a router as well as a firewall?

Second question:  should my topology eventually look like this:  FIOS ONT, firewall (IPCop), switch/WAP (which would be the Actiontec MI424-WR with DHCP turned off (but how will the wireless devices then get an IP?  I assume from the SBS2008 DHCP server...), then all computers including the SBS2008 box hang off that switch (and other downstream switches)?

To complicate matters, I have a dynamic IP w/Verizon.  I also have Vonage, XBox360, PS3, and SkyAngle (ip tv) that I will need to get working eventually. :-)  (Those are all working currently via the Actiontec.)

(Hmmm...I see that I also have ISA2006 included in my MAPS subscription.  Should I build an ISA server rather than an IPCOP server? Would I put it in the same place as I was going to put the IPCop box?  And...seriously...I'd need to add antivirus to the ISA server, correct?  And since it's ISA, it wouldn't qualify for free AVG.  *sigh*)

Yikes...is that enough questions for now?? :-)

Anyway, I look forward to grinding through this with others of the same mindset, and having a resource for others who want to travel this path in the future.  

Thanks Experts!