Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.
https://exchange.xforce.ibmcloud.com/vulnerabilities/4609
http://www.checkpoint.com/techsupport/alerts/list_vun.html#IP_Fragmentation
http://archives.neohapsis.com/archives/bugtraq/2000-05/0473.html