1GB is enough. ZS is a firewall itself, so it doesn’t really matter where will you place it in your network. You could put it in your LAN and create a separate DMZ for WIFI clients. You can also swap Zywall for ZS and let it do everything. If you have multiple WAN links you should put it in front of everything else so that it can perform the net balancing.