I have a user that cannot access a citrix session through a checkpoint Firewall. I have setup a static route through my NAT pool which is what I have had to do in the past to resolve this. I can ping the address of the server but cannot establish a session. The user has full access to the web and I can autheniticate and update the security on the firewall. Any Ideas