Unfortunately you are falling foul of ICMP not being tcp. The ICMP is virtual session and the way that the Check Point handles is that see's the ICMP as the same session and so continues to NAT...