Maybe the IIS server is on the VPN Network.
You may fix it with adding another static route on the SQL server
route -p add <IP of IIS Server> mask 255.255.255.255 <IP of SSG20>
However if you write the IPs and maks of both IIS and SQL servers here and the IP range for the VPN Network maybe we will work out a better solution.