An ACS server sits on the DMZ switch and when I try to authenticate to the Mobile software using port udp/1812 I am getting a connection ok to two IP addresses at the remote end
So I am getting out ok via the DMZ Checkpoint FW and over to Company A IP addresses

I can see logs from the Checkpoint firewall but I donít see any return traffic with the source being one of the Company A IP addresses

The ACS server has a public NAT address (static) which is taken from out outside Checkpoint firewall range

Is the problem on the Checkpoint or the remote site

Is their any commands i can run like fwmonitor or tcpdump to check