They're right about it not supporting Policy NAT. It supports One to One NAT which is no problem for you having one server, but they have multiple. That's a 1200+ (before tax) dollar VPN router. They need it for things to work properly on their end I'm guessing. But they're making you foot the bill.