XTM25 dropping WAN connections every 15 minutes?
I could use some help getting to the bottom of a weird (at least to me) network problem, and please indulge the lengthy description—I want to make sure I provide enough background info and context.
I’ve got an XTM25 configured with Multi-WAN, Interface Overflow.
I’ve also got a number of users that connect to hosted QuickBooks on Right Networks, which uses RDP.
Somewhere around six weeks ago, it was brought to my attention that my Quickbooks users were frequently getting “kicked out” of Right Networks. My investigation led me to discover that what they were experiencing was a brief interruption in the RDP connection—maybe just 30 seconds or so, if that—and then the connection would reestablish itself, though the user had to re-enter their password each time this happened, presumably due to the way the RDP server is configured.
At first I chalked this up to transient issues or random glitches, but I was told by the one person who pretty much spends all day in this RDP connection, that the connections were very frequent and occurred “dozens” of times per day.
I happen to work remotely a lot and use Splashtop to remotely access various PCs on the LAN. In roughly the same timeframe that my QB users’ problems began, I started noticed that my Splashtop connections were frequently interrupted. Same symptom—connection would become unresponsive for 30 seconds or so, and then it would be back again.
It took me a little while to realize this, but I’ve discovered that my disconnects and the users’ disconnects always occur at the same time. Not only that, but they are happening every 15 minutes on a predictable schedule, at 13, 28, 43, and 58 minutes past each hour.
Bottom line, as best as I can tell, all inbound and outbound WAN connections are getting dropped every 15 minutes like clockwork, and I don’t know why. The XTM configuration has not been changed recently—not in years, actually) to cause a problem like this.
I logged into the XTM and pulled the Traffic monitor logs (which overwrite every 17 minutes so it’s capturing the outage time), but I’m not experienced enough to see any obvious problem or smoking gun.
If anyone has any thoughts on what might be going on here or what I can check, I would be very grateful.
Thanks very much.