topic Re: Issues with Check Point Mobile VPN Reconnection after Initial Setup in SASE and Remote Access

Issues with Check Point Mobile VPN Reconnection after Initial Setup

RafaelBohrer — Thu, 14 May 2026 16:33:48 GMT

Hello all,

I have configured my Quantum Spark 3920 gateway as a VPN server for remote clients. I am using Active Directory (AD) for authentication, and it is working correctly.

After installing the Check Point Mobile Application on a Windows machine, the site wizard appears to configure the first site. I enter my external IP, and the wizard identifies the gateway configuration perfectly.

When I use my credentials to connect, the client communicates with the gateway, authenticates successfully against the AD server, and the tunnel is established.

However, if I disconnect and try to reconnect, the connection fails. Interestingly, if I delete the site and recreate it, the connection works again for that single session.

Does anyone have any insight into what I might be missing or doing wrong? Any help would be appreciated.

Regards.

Rafael

Re: Issues with Check Point Mobile VPN Reconnection after Initial Setup

Chris_Atkinson — Mon, 18 May 2026 05:23:42 GMT

Are you able to share details of your client & gateway version/JHF and things like link selection settings (usually it this)?

Refer also: sk92716 | sk44075

Re: Issues with Check Point Mobile VPN Reconnection after Initial Setup

PhoneBoy — Mon, 18 May 2026 15:31:42 GMT

That's consistent with your "Main IP" listed in the Cluster/Gateway object being different from the IP that your clients need to connect to.
A couple ways to fix that:

(Legacy) Link Selection: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SitetoSiteVPN_AdminGuide/Content/Topics-VPNSG/Link-Selection.htm
To configure Link Selection differently for Remote Access, see: https://support.checkpoint.com/results/sk/sk32229
To resolve site based on FDQN instead of IP: https://support.checkpoint.com/results/sk/sk103440