I am running two Checkpoint UTM-1 270s running NGX R65 in a HA cluster. On the external interface, besides my primary ISP (not a VLAN) I have 5 other VLANs, including another ISP and 3 private connections from our ISP (COX) on MetroE. Two of these MetroE connections are with partners, and are completely NATted, with no internal access. The third is with a new branch office. DHCP requests from the new office are not being forwarded to the Windows AD DC.
I have turned on DHCP relay in the Expert Mode of both firewalls, and enabled it both on the External and the External.210 interfaces, but no luck. Seems like this should be pretty straight forward, but I am beating my head against the wall here.