Windows XP and Vista workstations loose connectivity to Windows Server 2008 64-bit file shares when Symantec Endpoint Protection MR3 or MR4 is present.
Access to shared folders can be lost when the server is under load. The Server will appear to be working and does not show any signs of deadlock.
This problem is fixed in Symantec Endpoint Protection 11.0.4202.75 (MR4 MP2) or later. Furthermore, we advise that the Windows Server 2008 should be running Service Pack 2 or higher.
Assume that you try to access a network file share that resides on a server that is running Windows Server 2008. However, in this situation, the file sharing connection drops intermittently after a while, and then the network share becomes unresponsive.
When this problem occurs, the following events are logged in the event log:
Event ID: 4226
Message:TCP/IP has reached the security limit imposed on the number of concurrent (incomplete) TCP connect attempts.
Event ID: 2022
Message: The server was unable to find a free connection number times in the last number seconds.
Note Event 2022 may occur every 20 to 30 seconds.
This problem occurs when the Windows Server 2008-based server is running certain versions of Symantec Antivirus. Some file filter drivers, such as Srtsp.sys, may cause this problem.
To resolve this issue, follow the instructions that are provided by Symantec to upgrade the Symantec Endpoint Protection software to Symantec Endpoint Protection 11.0.4202.75 (MR4 MP2). For more information, visit the following Symantec Knowledge Base article: