I have 2 SSG-140 (6.3.0r7.0) in NSRP cluster in NAT mode, with has about 10 security zones and few IPSEC connections.
My test server (debian 6) are using DNS servers which are not behind SSG-140
Today I found strange problem: If I - try to access any web, ftp, etc I have to wait about 3 to 5 seconds to get answer from remote site. I made tests with lynx and the first seconds I can see: Looking up xxxxx.com
If I try ping remote site, I got answer immediately.
If I move test server in other location, all is fine.
If I put neccessary record in /etc/hosts file also everything is fine.