The problem isn't going to be be a layer 1-4 issue since you establish the connection, but it drops sporadically. I would run a network capture on the firewall to see if the host is sending a reset. If that doesn't prove useful, I would run a capture...
Believe it or not, its not possible using the Monitoring and Reports components in ACS 5.x, trust me I gripe at them every single RSA Conference and Networkers. At the RSA conference they told me that it would be included in the next major release of...
Shave, The problem you have is due to upgrading to 4.1.*, which is not the software train you need. You were previously running 4.7.*, which is the correct one for SD/SVC.Ken