[RobertGraham]

When you unload the policy, you can ping the CheckPoint system, but you can't login?

Have you set the clocks? Sometimes this interfers with the certificate. Check to make sure both the server and client have the clocks synced.

Also, you might want to try doing a cpstop, cpstart. Have you tried this yet?

You could try running netstat -an | grep LIST to see if the CheckPoint server is listening on the CPMI port too.