There is no reason why you cant accomplish this as long as Checkpoint is using open standard IPsec. You might want to check with them to see what VPN boxs are compatible with their VPN solution. Is there any reason why you dont just terminate it on the Cisco Cable Modem? I know most have IOS upgrades available with the IPSEC feature set.