Checkpoint NG Firewall and Citrix XPe FR3/SP3

[plsntnrules]

I am sorry if this isn't the right forum for this question...

I work at a company that publishes their web application thru a Citrix XPe/FR3 environment. All the customers can connect just fine and have no issues.

We have this one customer that for whatever reason can connect fine and can launch the app fine and it works. But if they leave the session idle for more than 2-3 minutes it disconnects them with the following message...

"The network connection to your application was interrupted. Try to access your application later, or contact technical support."

There are no idle timeout restrictions set on any of the servers in the farm and if there were then other cutomers would be complaining about the same issue.

I am beginning to believe that its a firewall configuration issue. This one customer uses a Checkpoint NG Firewall. I have no idea about this particular kind of firewall and was hoping anyone on this forum could shed some light...

Is there some particular setting that needs to be specified for citrix connections in particular on this Checkpoint NG Firewall ?

We stand to lose a really big customer if we cannot get this resolved and for a company of our size that would be devastating in terms of revenue.

Any help would be greatly appreciated.

thanks you.