Hi Todd,
Thanks for writing in.
Cisco adheres to RFC1812, "Requirements for IP Version 4 Routers," which states ...
"A router MUST not believe any ARP reply that claims that the Link Layer address of another host
or router is a broadcast or multicast address."
If the solution (Firewalls, Load-Balancers, etc.) requires the router to send packets to a Layer 3 unicast IP address using a Layer 2 multicast MAC address...the router must be configured with a static ARP entry.
Hence, you need to configure a static arp entry on the cisco router to map the checkpoint cluster ip to the multicast mac address.
arp 10.0.0.10 0100.1234.1234 arpa
where 0100.1234.1234 is the multicast mac address.
Please try this and let us know if it works.
regards
-Alok