2 Things to know about Manual NAT and ARP
on the upstream router you have to route the external NAT address or address range to the external interface address of the firewall,if its cluster then add routes to vip ip
If you can't manage the router then you have to add the nat ip and mac addresses of related ext interface described at sk30197
The Simplest and Best Way to Manage Checkpoint Secure Platform http://www.smartsplat.com
