I understand that we can limit the VPN accessing to certains virtual servers only and I have also been told that the SAP end-users don't need to use the VPN to access the SAP server as long as certain ports on the router are opened. But, I have no idea how to set these and my friends won't have time for me 'til end of next week. At this moment, the easy way for me to solve this VPN issue is to get another line from the cable company :-).