Ever tried to setup an IPSec VPN between a checkpoint gateway and a device from another vendor? Even their interoperability guide doesn’t cover half the things that can and will go wrong.