The problem sounds exactly like a DNS resolution problem. The fact that you can PING means you have tcp/ip connectivity. Check the settings on the ProSafe and don't allow split tunnels. If you can figure out a way, force the firewall to give the remote client the SBS server's IP Address for DNS Resolution. That may even be an option in the VPN Client configuration. Test by not allowing Local LAN Access, that forces all traffic through the tunnel. Check the client to see if there's a way to manually enter the SBS Box's IP Address in a DNS Server setting.
Secondarily, make your life easier: use Microsoft's Routing and Remote Access Service on the server, forward tcp/1723 and GRE (if available) to the server's IP Address and setup a windows VPN connection from the Network Control Panel on the remote workstation. I can provide some quick instructions for that (even if you just want to test) if you want.