S2s vpn

[mrfirt]

Hi  we have maestro and we maked s2s vpn with customer but we have problem 

s2s vpn forks fine but some client must come with mobile vpn but not working becasue checkpoint say public ip must come with encrypted

my firewall ip = 31.145.191.x

remote firewal == 21.21.3.x

and networks 

remote network = 192.168.19.0/24

my network = 10.0.0.0/8

this way everything work fine 

but when some client in remote network they have 192.168.20.0/24 ip And they public ip 21.21.3.x when they want mobile acces vpn with my firewall my firewall drop 443 connection because firewall say must come with encrypted how can i fix that 

[the_rock]

I think if you upload basic diagram of all this and whats failing, would definitely help.

Best,

Andy