Over VPN clients do not seem to be using their DNS search suffix list. When attempting to ping a netbios name, the client appends it's own domain name to the lookup. The dns server responds that there no such name. The client then does nothing.
From inside the LAN this works totally different. Client appends it's own domain. DNS server replies no such name. Client appends next domain in search suffix list. DNS server has a secondary zone for this domain, replies with the correct IP address.
The client can ping the resource by IP, and FQDN. Also, nslookup resolves the correct name. It seems that only netbios lookups are failing. Tags: DNS, VPN, Checkpoint, Windows XP