Hello,

i have a S2S Connection to a Checkpoint NG over BM 3.8. But i can only
reach one Host on the other Side 10.10.1.2 (Ping, Tracert and WWW).
But the second Host 10.10.1.3 is unreachable. Tracert stop at the first
Hop, Ping says destination host unreachable.

My protectet Network is 172.24.0.0/255.255.0.0 the other Side have 10.10.0.0/255.255.0.0

In the third party traffic rules in iManager i have insert the 10.10.0.0/255.255.0.0. I have also tried to add only the two host with
10.10.1.2 and 10.10.1.3/255.255.255.255.

In the IKE-Screen i can see two lines like proxy ID type 4 172.24.0.0/255.255.0.0 and proxy ID type 4 10.10.0.0/255.255.0.0.

The tracert to the first host shows two hops:
1. BM-Private IP 172.24.200.16
2. unkown Host, no answer
3. 10.10.1.2

The tracert to the second host stop immediately:
1. * * *
2. * * *
etc.

in filtcfg i have add a rule any to any for testing.

Whats wrong? What can i do? Is there a rule missing at the checkpoint
or what?

King regards
Thomas Kreis