I have created a ipsec VPN from site A (Cisco) to Site B (checkpoint R77.20). At site B, i have a static 1-1 NAT applied: ipx --ipy
Tunnel is live and connection up; I can telnet my site B system from site A; but unable to telnet site A system from Site B.
So I checked the Checkpoint firewall at site B, found traffic from ipy is passing through firewall policy, not VPN policy ; also not being source NAT to ipx.
So does a policy based VPN require any static routing in checkpoint? Any specific reason for source NAT policy not working?