IP office 500 SCN issue with Checkpoint R75

[clarkstyx18]

We currently have 3 sites interconnected through MPLS, each site has IP office 500v2 R6.1 and are linked with each other through SCN.
Site A (Main HQ) has checkpoint R75 installed wherein site B and C doesnt have firewall. SCN status is up on all the 3 branches. Site B and Site C can call each extension vice verse. Site A cannot call either site B or C. On the checkpoint firewall, a policy has been made to allow ALL traffic bi- directional including H323. I believe that all my configurations on each IP office is correct and there's something that needs to be done on the checkpoint firewall but I'm not sure what it is. Is there any tool to trace which ports are blocked or to see if packet has been dropped whenever a call is made from site A to site B or C? Attached is a sample monitor log in which we tried calling from site A (ext4355) to site B (ext 7055).

 

[amriddle01]

You can try using paping.exe to ping on specific ports, that will show what is being blocked, but as you/they don't know why it's blocking or how to stop it, it might not help anyway

 

[mattKnight]

>IPS is already disabled


I don't think IPS and the application intelligence around H.323 are the same thing (although there may be soem overlap).

But I am out of suggestions

Take Care

Matt
I have always wished that my computer would be as easy to use as my telephone.
My wish has come true. I no longer know how to use my telephone.