We have a Sharepoint layouts page that calls a Webservice (.asmx) to get some data. We use Kerberos/Integrated Windows Auth with impersonation and for users on machines in the domain this works just fine. However for users on a VPN (ie. their machine is not in the domain) this fails. We're getting 401s on the Webservice connection... Is there anything we can do to remedy this?