That's what's weird, I don't see anything bad in the logs (I am logging the HTTP rule). I see some, but not all, of the requests for http when issue is happening.
I assume you are referring to the Checkpoint logs, not the NT event logs. I didn't have them rolling everyday, in fact I had...