ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

Connection problem behind SSG-140

[ Edited ]
‎10-13-2011 04:26 AM

Hi,

 

I have 2 SSG-140 (6.3.0r7.0) in NSRP cluster in NAT mode, with has about 10 security zones and few IPSEC connections.

My test server (debian 6) are using DNS servers which are not behind SSG-140

Today I found strange problem: If I - try to access any web, ftp, etc I have to wait about 3 to 5 seconds to get answer from remote site. I made tests with lynx and the first seconds I can see: Looking up xxxxx.com

If I try ping remote site, I got answer immediately.

 

If I move test server in other location, all is fine.

If I put neccessary record in /etc/hosts file also everything is fine.

 

How can I find reason of this problem?

 

Thanks.