What error are you seeing with Host Checker?
Does the connection work without Host Checker?
We are not aware of any tunnel setup issues on Sierra in that release nor with the Host Checker process ability to run; however, if the check you are doing is for a specific AV, then a case might be needed to check with OPSWAT