We have a working configuration with a Netgear router where external users connect through to a SBS 2011 server using PPTP VPN, no problem. We installed a 2920 with all the matching set-up (static IP, DMZ), and everything else still works for clients (Web page, OWA, Outlook mail, etc.): this demonstrates that the DMZ setting is correct. The server gets SMTP OK, outbound web connections are fine, but the inbound VPN can't connect to the server now. All the settings are as for 2820 boxes we have, and they do allow the VPN passthrough. We called the premium number, and they said it has been tested and works, however, that is no use to us, as it DOESN'T work. Is it blocking GRE packets? All the check boxes for PPTP, etc. are cleared, as for the 2820 configurations.