As a bit of further information for this, we got some logs from the user's machine today, and it looks something like this:
User connects to VPN
VPN connects and negotiates all of the networks in the encryption domain
VPN finds all of the DNS suffixes
Then, you get an error:
Message from VPN App: [VPN Name]
Got disconnect reply, try without reusing Office mode address: disconnect
Which is then followed by the error presented to the user:
Message from VPN App: [VPN Name]
snxConnect: Deleting session on exception System.ArgumentOutOfRangeException: The operation attempted to access data outside the valid range (Excep_FromHResult 0x8000000B)
at SharedLibrary!<BaseAddress>+0x220e3b
at SharedLibrary!<BaseAddress>+0x220d8f
at SharedLibrary!<BaseAddress>+0x2447a5
at SharedLibrary!<BaseAddress>+0x2a7235
at SharedLibrary!<BaseAddress>+0x2a7218
at CheckPointVpnPluginAppBg.CCC.sendSnxHello(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnDomainNameAssignment& nameScope)
at CheckPointVpnPluginAppBg.CCC.sendSnxHello(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnDomainNameAssignment& nameScope)
at CheckPointVpnPluginAppBg.CCC.snxConnect(Networking.Vpn.VpnChannel channel, Networking.Sockets.StreamSocket socket, Networking.Vpn.VpnRouteAssignment& routeScope, Networking.Vpn.VpnDomainNameAssignment& nameScope, Networking.Vpn.VpnTrafficFilterAssignment& trafficFilterScope)
Then you get lots of messages about disconnecting from the VPN