Routing problems

[ronhirsm]

I have Check Point firewall (CP AI R55, SecurePlatform) with 3 interfaces (external,internal and dmz), internal network card using ip-address 10.10.100.1...

I have second subnet in my intranet (10.10.40.0/24) which is connected through two switches.
IP-addresses:
framework switch 10.10.100.2
internal switch 10.10.40.1

traffic between firewall and 10.10.40.0/24 works well but 10.10.40.0/24 cannot access to the Internet or router (everything traffic is permitted)... firewall and network 10.10.100.0 can connect to the Internet..

I think that problem is at 10.10.40.0 network routing??

My routing table:

dest, mask, gw

199.199.199.192, 255.255.255.224, 199.199.199.193
10.10.40.0, 255.255.255.0, 10.10.100.2
10.10.100.0, 255.255.255.0, 0.0.0.0
0.0.0.0, 0.0.0.0, 199.199.199.193

199.199.199.192 is my global subnet
199.199.199.193 is router to the Internet

Are any good advice?

[tdvit]

when you do a trace route to the internet from a machine on the .40 subnet where does it stop?

[dguinn]

It almost sounds like you have no NAT rules, and the external devices don't know how to get back to the internal network.

What's your NAT table look like?