we had the same issue with our checkpoint firewalls,becasue we are not running any dynmic routing on the firewalls and they are clustered & routers were runing HSRP. we found that the RP was pointing to the virtual IP address of the firewalls, for PI...