Endpoint Protection

Ok, I have searched the forums, and although I am seeing a lot of issues with SEP and RDP, I am not seeing my specific issue.  I currently have a Windows 2003 Ent Server running SQL2005 which houses my main production DBs.  I have a couple of Windows 2003 Stnd Server that runs apps that link to these DBS on the Ent server.  All servers are also running SEP MR4 MP2.  Here is the issue.  When I try to RDP in from any desktop/laptop I am able to get to the login screen and enter my credentials.  I hit enter and I get the little connection issue icon on my RDP session and it disconnects me.  The DB server also drops the DB connection with the 2 Stand servers that are pulling data from the DB server.  The weird thing is that I do not lose actual network connectivity.  However, if I remove SEP from the DB server, leaving it on all the others, I am able to RDP into that DB server without any issues or disconnects. 

I am wondering if it is the threat protection piece, but I am at a loss on this one.

Hi,

       If you are using a Broadcom NIC then try disabling "Large Send Offload" feature of your Broadcom NIC and let us know whether it helped if you are using some other NIC please let us know the details. The NTP feature of endpoint acts as a 2 way firewall and if it is not tested in a Test enviornment it might cause network connectivity issue.

Have you tried testing with an "Allow All" rule at set at the top of your FW policy. See if the issue then goes away.
If this works then you will need to change your FW rule for allowing RDP traffic on the DB server.

Thomas.

Ok, I did disable the Large Send Offload and it seemed to work.  Most users were able to RDP into that box without issues.  However, now the issue seems to be back.  I need to double check if someone set the LSO back to enabled, but that is doubtful.  Any other ideas, please keep them coming.

Try by installing only AV/AS feature in server and see any difference...