Device: Cisco ASR1001-X
Image: asr1001x-universalk9.03.17.00.S.156-1.S-std.SPA.bin
Currently we found that there is problem with RPC/DCE traffic traversing the ASR router, all domain controller sync traffic and netlogon services are affected.
Downgrade to asr1001x-universalk9.03.13.02.S.154-3.S2-ext.SPA.bin has solved the problem.