I haven't played with client termination on the BSR 222, as I've used them for just BO tunnels. Is there an option to push out a domain name and DNS servers from the internal DHCP server on the 222? It sounds to me like the device that is initiating the connection doesn't know it's DNS suffix, so it isn't resolving names properly. Can you ping the FQDN of a device on the main network? If you can ping the FQDN, but not the netbios name, then somehow pushing out a DNS domain name to the client (or hardcoding one) should fix the issue. I know that can be done in the Contivity 1010, 17XX and 26XX models.