If host checker passes during the first attempt that means host checker is able to detect your antivirus and firewall.
Since host checker has capabilities to reevaluate based on an admin set interval it reevaluates the client for the same policies during this time if the check fails then users connection could be dropped.
Its important to confirm that the antivirus, firewall status is as per host checker requirement during all reevaluation.
