FVS124G - how to block wireless devices on network from getting to server

[walkoffhomerun]

i purchased the FVS124 for its combo of gigabit abilities as well as firewall performance. i have now added a wireless access point to the network connecting it to one of the 4 connections on the FVS124G. before i did this it was a self contained server with no outside connections but i had to add this wireless connection. the server as well as a network attached storage device have data on them that i do NOT want anyone on the wireless side accessing. on the wireless access point i have turned on mac filtering and WPA2 protection to help from outside intruders but i am also worried about people on the trusted side as well from accessing files on that server. all i really wanted to do with the wireless access point is to give wireless internet to those users but block the server or NAS from being seen or breached. i was hoping the FVS124 could help with this - basically preventing backwards traffic from the wireless access point into the server or to the NAS storage device.

maybe i can add something else in between to separate these out? is there a feature in the FVS124G that can do this? I have network magic connected and although this is great to see the network it also exposes my server and the NAS to the network in very clear detail and a simple click of a mouse allows anyone running network magic to go straight to the login screen for that device. not exactly what i was looking for. again, just looking for wireless internet for other people on the network without exposing them the server.

someone at netgear tech support mentioned using a 2nd tunnel to separate the wireless users from the rest of the wired network???? more likely this is done on the wireless access point side? my wireless access pt is another brand but it is a "business" class with some extra security features....not enterprise level though.