I have built a S2S VPN between a Cisco ASA 5525X (on latest firmware 9.4.1) to a Checkpoint managed by a partner. I can ping across the VPN sourcing from the correct IP on my side to an IP on their side in the encryption domain, so the VPN does come ...