I have a Windows Server 2008 R2 system that has started to drop packets randomly;y. Users complain that they are experiencing random slowness and I noticed that if I run a ping its ok for around 40 mins and then the ping latency increases and then I get drops outs in the pings. The event log corresponds with messages stating The Windows Filtering Platform has blocked a packet. The packets are users connecting for file and print sharing, email delivery etc. These are allowed connections that are expected that are suddenly dropped. After around 10 seconds its all back to normal. This happens every 30 - 60 mins. I have updated NIC drivers and firmware changed the cable and switch port, made sure the server is patched and even disabled the AV to see if any of this is the cause. If you Google these errors almost every post is about entries in the security log that result in admins switching off the notification, I seem to be the only one who actually has an issue in line with the events. Obviously there are Firewall rules in place, else it would not work at all however I have checked these.
Box is a physical Server 2008 SBS, 16Gb RAM Quad Core XEON
If anyone has any idea I would love to hear from you.
Thanks Guys, Bob Murray