K, got it, fair enough : - )
Here is what escalation guy from Dallas gave me few months ago when customer had similar issue...client never implemented it, since they had more pressing projects on the go, but not sure if this is something that would help though
Andy
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
fw_clamp_tcp_mss_control - change in Guidbedit to true
mss_value - change to 1200
fw_clamp_vpn_mss -> # fw ctl set int fw_clamp_vpn_mss 1
sim_clamp_vpn_mss -> change to 1 $PPKDIR/conf/simkern.conf