First off, the risk without a firewall isn't that severe, since you have a hardware incoming firewall in the router. I've run the systems here without a firewall for years, the router's NAT layer keeps me quite safe.
You should be able to get a configuration of ZA to allow file/print sharing, you need to put the subnet of your local LAN in the trusted zone.