[Jahk Nah Rai]

Right I do understand that, however, it seems that even though the admin at the other end can set up rules on his Nortel device I still have to resort to statically NATing every internal address here in order for the VPN communication to work. I've tried otherwise without NAT or hide NAT and it doesn't work. I believe it's due to the fact that NATing alters the address information necessary for VPN to work.

I do realize there is a VPN community feature in Checkpoint NG but it only works with Checkpoint devices, not others.

I don't have all the public IPs in the world to statically NAT every internal device to so I'm wondering if there's a better way to simply pass all VPN traffic through my Checkpoint firewall without any NAT applied to it.