If your VPN hardware is using poptop (or something similar) you have to make a change to an OS X config file to get it to connect (change not necessary when connect to a MS server). Take a look at steps 11 - 23 of this which was the first reference I could find for it.

-Mike