Routers / Switches :: Still Not Able To Telnet / SSH To Switch?

I can telnet to switch from checkpoint firewall access port and from switch directly. I can ping/traceroute successfully to the switch. Access-lists 14 & 15 are allowing the traffic I want. The router on the other side of the FW has 2 static routes and a default static route set up.

Here is some of the config from my switch:service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec localtime show-timezone

service timestamps log datetime msec localtime show-timezone

service password-encryptionhostname xxxxx

enable secret xxxxxx

username xxxxxxxx password xxxxxxxip domain-name xx.xx.netaaa new-model

aaa authentication login default local enable line none[code].....

Not sure of checkpoint firewall config....I have run wireshark when trying to telnet and I get no syn-ack back from remote switch. Just 3 consecutive syn attempts.I have some switches I can connect to and they go right through the 3 way TCP handshake and I cannot find any differences in the configs between the successful connections and the unsuccessful connections.