SEP with network protection will block internal file server multiple times during the day. We have disabled feature as a temp solution. I looked at logs but don't see what rule triggered the block.

Try to correlate the time of the block with what's showing in the Traffic log.

If it helps, add a rule to allow traffic to/from that server.

start with these

How to troubleshoot blocked network traffic with the Symantec Endpoint Protection firewall

http://www.symantec.com/business/support/index?page=content&id=TECH203497

Hi,

Please update the screen shot of you trafic log,

as seems multiple request comming from the server where sysmantec might block the server request,

Please run LPA on that machine.

Title: How to run the Threat Analysis Scan in Symantec Help (SymHelp)
Article:TECH215519
Article URL http://www.symantec.com/docs/TECH215519

For your ref

Title: How to Run Load Point Analysis for Symantec Support
Article:TECH203028
Article URL http://www.symantec.com/docs/TECH203028 
 

Threat Analysis Scan replaced Load Point Analysis