A file sharing connection to a Windows Server 2008-based server drops unexpectedly if the server has Symantec Antivirus installed

Assume that you try to access a network file share that resides on a server that is running Windows Server 2008. However, in this situation, the file sharing connection drops intermittently after a while, and then the network share becomes unresponsive.

When this problem occurs, the following events are logged in the event log:

Event ID: 4226
Source: Tcpip
Message:TCP/IP has reached the security limit imposed on the number of concurrent (incomplete) TCP connect attempts.

Event ID: 2022
Source: server
Message: The server was unable to find a free connection number times in the last number seconds.

Note Event 2022 may occur every 20 to 30 seconds.

This problem occurs when the Windows Server 2008-based server is running certain versions of Symantec Antivirus. Some file filter drivers, such as Srtsp.sys, may cause this problem.

To resolve this issue, follow the instructions that are provided by Symantec to upgrade the Symantec Endpoint Protection software to Symantec Endpoint Protection 11.0.4202.75 (MR4 MP2). For more information, visit the following Symantec Knowledge Base article: For more information, visit the following Symantec Web site: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

For more information about intermittent file sharing connectivity from various clients to a Windows Server 2008 server, visit the following Microsoft Web site: