[mcnallym]

OK just to clarify this is what you should have.

Connectra is on 192.168.1.1

This is on the DMZ and is NATted via the firewall to a public address lets say 203.203.203.1

On the Check Point firewall then you have a rule as follows

Src = Any Dst = 203.203.203.1 Srv = 443 and 444 Act= Accept

In the NAT you have

Src = Any Dst = 203.203.203.1 xlatesrc = original xlatedst = 192.168.1.1

If you have that then you should be able to access the connectra with snx.

What are you seeing the firewall logs

Silly question but snx is configured on the Connectra for some users.