For folks having problems with getting federation to work using checkpoint firewall
After several weeks of troubleshooting with MS and Checkpoint, to get federation to work you have
1) add the edge certificate to the checkpoint box
2) When defining port 5061 make sure its definied a regular port, we had it defined for SIP, which apparenly stripped the SSL traffic.
Hope this helps someone =D