I config the site to site vpn between the pix 525e with software 6.3(4) and checkpoint ng p1
the problem is can ping behing pix to the checkpoint side, but cann't ping opposite direction,
when show crypto isakmp sa and show crypto ipsec sa
that display the session have been created,
when I debug crypto ipsec, it display that subnet on the other side which is 10.166.0.0/19 is not identical with the net 10.166.16.0/20 which i defined on the access-list that used by the crypto map match address,
I have check that the checkpoint's config, his source and destination are identical to pix config
and when I change the destination network to 10.166.0.0/19, ping both direction works,
the checkpoint version is ng with 1p, can anybody tell me either the checkpoint config is wrong or the campatibility problem, and what can I do to deal with that
