i have a nokia ip330 running checkpoint 4.1. users use the securemote client to dial in and access the LAN. however if the user is behind NAT, then the user is unable to authenticate with the firewall. ive tried the option 'force udp encapsulation'but to no avail, any other ideas?