The simples way to perform GUI-baed firewall management is through Linuxconf.
Download the latest version from www.solucorp.qc.ca.
The latest version include a module for firewall managemant, IP masquerading, and port redirection.
It's easy to configure user accounts through Linuxconf so that they can use Linxconf for management configuration, including setting up rules for ipchains.
Everything is done through a browser window, so remote administration is possible.
If you have an old (486 and up) PC you're not using, install linux and linuxconf on it, and let the other admins practice setting up firewalls, and configure ipchains on this box.
This is a cheap and easy way to provide training.
www.linuxberg is a good source for firlewall packages.
click on Software -->X11-->firewall/security.