SecureClient and NAT

[gchow]

(WAN) PC (SC client) ---- [FW B] ----- [FW A] ---- PC (TEST) ( LAN )
|
|
PC (QC)

PC (QC) - connect between FWB & FWA
FWB: checkpoint firewall (software)
FWA: checkpoint firewall (UTM-1)

eth1: external interface of FW B
int1: internal interface of FW B
eth2: external interface of FW A
int2: interanal interace of FW A

PC (SC client): 172.38.32.100 / 16
eth1: 172.138.32.51 / 16
int1: 192.168.2.51 / 24
PC (QC): 192.168.2.200 / 24
eth2: 192.168.1.51 /24
int2: 192.168.1.1 / 24
PC (TEST): 192.168.1.100 / 24

The following are the settings for two firewalls

FWB: NAT
FWA: NAT, VPN

The following are the test for two firewalls

success:
ping from PC (SC client) to PC (QC)
ping from PC (SC client) to int1 of FWB
ping from PC (QC) to PC (SC client)
ping from PC (TEST) to int of FWB
ping from PC (TEST) to PC (QC)
ping from PC (QC) to PC (TEST)

failure
ping from PC (SC client) to eth2 of FWB
ping from PC (TEST) to eth1 of FWB

PC (SC client) can't use secure client to remote PC (TEST)
PC (QC) can use secure client to remote PC (TEST)

Please advise

Version: Checkpoint Firewall NGX R65 and UTM-1
VPN, NAT, SecureClient