Well i would say that you may need to find someone who is a firewall expert and have them take a look at your architecture.

It isn't something that can be easily taked through over this message board.

Good luck.