Hello everyone. Just for record: in agreement with the customer switching to IKEv2 and enabling forceencaps=yes have resolved the interoperability problem. The forceencaps=yes has been setup because the checkpoint was replying with udp datagrams instead of ESP packets for an unknown reason. Checkpoint customer is running R77.30