Security Software

After a lengthy evaluation, we've been running 6.3.1 for a couple of months now in production. Just recently we've been experiencing issues with delayed connections to the server. The delays seem to happen in increments of 30 seconds - sometimes as long as 3 minutes (e.g. :30, 1:00, 1:30, 2:00, 2:30) - although many seem to be 2:30 min. Access logs show that no search or modify operations occur during this period - just connection closures (either B4 or T1 tags). It's as if the DSEE software thinks the network has disappeared. Once the period of time is up, operations resume normally. Does not happen at fixed intervals - can be working fine for 2-3 hours and then hit a snag. Needless to say, some of the users hitting the directory have shorter time-outs than the 2-3 minutes this can take to resolve itself, so there are complaints. Error log does not provide any information except that there are no entires in it for the duration of the service disruption. Note that all connections to this server are SSL connections(LDAPS). I think I ruled out the network as this problem happens even when ldapsearches are issued from the localhost box. The system does not seem to be stressed that I can tell - iostat shows minimal disk usage, prstat shows under 8% CPU utilization.

Particulars:
Platform: Sparc Solaris 10
Hardware: T2000 16GB RAM
Software: DSEE 6.3.1



A couple of theories - Java garbage collection? Thread count issues? Solaris 10 listener issue?

Has this been seen before? Please help!

Thanks.