[melipla]

I've experienced a similar problem with an NGX clustered environment, only it wasn't as timely as yours. My problem ended up being the fact that SecureClient was attempting to re-establish its connection with the gateway via an internal interface instead of the external interface it used initially.

The fix was to use guidbedit and search for this property:

apply_resolving_mechanism_to_SR

For cluster objects its set to False by default, you'll want to set it to true and repush the policy to the gw [and update site?]. Check out SK32229 which talks about the resolving mechanism and SK22020 which talks about SecureClient's resolve_multiple_interfaces property.