NAT problems/questions

We have been ruuning mikrotik routers as routers and AP for about 4 years now. Up until now all our incomming lines have been T1’s and the old 2600 cisco’s were doing our NAT for us. We just got an enternet connection and are using a Mikrotik for that. We move a big block of users over and most are fine. But I am getting a lot of calls and have to move more people back to the copper because of problems with VPN’s and AIM. Seems like they can not connect. I have the two helpers turned on and I am starting to fiddle with using SAME instead of NAT. Any other suggestions?

Thanks
Mark