Double NAT and Routing

[sectech2k]

So, my question is how does CheckPoint really handle the NATing and routing in this situation where the internal workstation is trying to connect to a server in the dmz using the public address that is NATed at the firewall while the internal workstation is also being NATed with another public address?

The traffic routes like this.

Internal clients connect to a ISA server that has 2 interfaces. One interface on the internal network and the other in the DMZ. In the DMZ are the compnay public web servers. The ISA server is configured with external DNS servers. So, when the internal user want to connect to the company public web server, the ISA server resolves the address to the external address instead of the DMZ address which is NATTed at the Firewall. Long story about that.

Thanks