I'm involved with a small group that is putting together a small network of, oh, 20 users (and supporting a few remote users), which we will stand up as a proof-of-concept effort. I have been tasked with recommending a hardware firewall with the following specs:

I've got authority to spend a minimum of $1400 but *might* have approval to go as high as $5000.
Wireless access point.
VPN.
Supports UDP multicast internally.
Bonus if UDP multicast can be forwarded through the firewall.

This can be an all in one device, or can be several devices. What would you buy?

Thanks!