Branch office with about 30 users all connecting via RDP to 3 terminal servers. A few times per day all users are disconnected for a brief period of time (10 seconds) and then reconnected. It affects all users, although some are connected via site-site vpn and some are going over the public internet (yes, we have port 3389 open on the remote TS, not my choice). The network looks like this - internet access is 10Mb, Fortigate 110C firewall, and Cisco 4500 series flat switch.
Thus far I haven't been able to find any event that is common to these instances except for the disconnected RDP sessions. There is some other traffic over the VPN such as print jobs, some SMB/CIFS traffic, etc. but most users are in remote desktop all the time.
Any thoughts or suggestions are appreciated!