Had this problem repeatedly on a 2850n, support advised to turn off the Firewall DoS feature, and I've not had it since. So there's a problem to be fixed in DoS somewhere.