no suitable ISAKMP SA?

[mbrowndcm]

Hello, I' m in the midst of trying to establish a VPN tunnel with a partner. They have a Checkpoint. We are having some issues establishing passed phase 1, and I am receiving no suitable ISAKMP SA when debugging

 ThisSiteFortigate~ (root) # diag debug app ike -1
 ThisSiteFortigate~ (root) # diag sniffer packet any ' host 192.168.2.10' 
 interfaces=[any]
 filters=[host 192.168.2.10]
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1:VPN_to_partner_p2: IPsec SA connect 9 192.168.1.1->192.168.2.10:500, natt_mode=0
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1: found phase2 VPN_to_partner_p2
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1: created connection: 0x1b21c58 9 192.168.1.1->192.168.2.10:500.
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1: new connection.
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1: IPsec SA connect 9 192.168.1.1->192.168.2.10:500 negotiating
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1: no suitable ISAKMP SA, queuing quick-mode request and initiating ISAKMP SA negotiation
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1:2: initiator: main mode is sending 1st message...
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1:2: cookie 998befcb2be6a7a9/0000000000000000
 2011-06-21 22:50:52 ike 0:VPN_to_partner_p1:2: sent IKE msg (ident_i1send): 192.168.1.1:500->192.168.2.10:500, len=228
 43.584426 192.168.1.1.500 -> 192.168.2.10.500: udp 228
 43.607619 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 43.607733 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:50:54 ike 0:VPN_to_partner_p1:2: sent IKE msg (P1_RETRANSMIT): 192.168.1.1:500->192.168.2.10:500, len=228
 45.570016 192.168.1.1.500 -> 192.168.2.10.500: udp 228
 45.622288 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 45.622378 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:50:55 ike shrank heap by 118784 bytes
 47.632361 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 47.632442 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:50:58 ike 0:VPN_to_partner_p1:2: sent IKE msg (P1_RETRANSMIT): 192.168.1.1:500->192.168.2.10:500, len=228
 49.570815 192.168.1.1.500 -> 192.168.2.10.500: udp 228
 49.642318 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 49.642416 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 51.652417 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 51.652527 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 53.662373 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 53.662487 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 55.672376 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 55.672468 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:51:06 ike 0:VPN_to_partner_p1:2: sent IKE msg (P1_RETRANSMIT): 192.168.1.1:500->192.168.2.10:500, len=228
 57.570033 192.168.1.1.500 -> 192.168.2.10.500: udp 228
 59.682404 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 59.682513 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 63.692446 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 63.692606 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 67.702485 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 67.702583 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 71.712447 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 71.712552 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:51:22 ike 0:VPN_to_partner_p1:2: sent IKE msg (P1_RETRANSMIT): 192.168.1.1:500->192.168.2.10:500, len=228
 73.570072 192.168.1.1.500 -> 192.168.2.10.500: udp 228
 75.722507 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 75.722619 192.168.2.10.500 -> 192.168.1.1.500: udp 88
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1:2: 998befcb2be6a7a9/0000000000000000 negotiation of IKE SA failed due to retry timeout
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1:2: expiring IKE SA 998befcb2be6a7a9/0000000000000000
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1: deleting
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1: flushing
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1: flushed
 2011-06-21 22:51:54 ike 0:VPN_to_partner_p1: deleted
 2011-06-21 22:52:04 ike shrank heap by 126976 bytes
 

Any ideas on what the problem is? I have reconfirmed all of the the configuration items (keylife, DH group, PFS, PSK). The only thing was confusion about the quickmode selector. In Checkpoint, the same thing is called encryption domains. Both are ACCEPT type ACLs that allow traffic to traverse the tunnels. I want to make sure this would cause a problem with the Phase 1, specifically because it' s a phase 2 attribute. Thanks! Matt