topic Re: Different long login time via ssh on FTD 4115 7.2.4 in Network Security

Different long login time via ssh on FTD 4115 7.2.4

seahorse — Wed, 29 Nov 2023 09:20:37 GMT

The two FTD 4115 are configured in HA and are in similar network.

In general they should have the same time to login.

On one box it is the general time to login via ssh, but on the other it takes more than 70 sec to get a prompt.So far I have not seen this different behavior.

The boxes have the same platform settings.

Any hint?

Thanks.

Re: Different long login time via ssh on FTD 4115 7.2.4

balaji.bandi — Wed, 29 Nov 2023 10:25:01 GMT

Delay could be based on the geo-location and latency and how busy the box.

can you ping constantly see any latency increasing and also check the CPU ?

Re: Different long login time via ssh on FTD 4115 7.2.4

seahorse — Wed, 29 Nov 2023 10:44:29 GMT

Thanks for your comment.

The boxes hae the same geo-location and current there is no production traffic on it.
The ping answers do not differ. CPU is the same.

Re: Different long login time via ssh on FTD 4115 7.2.4

Mark Elsen — Wed, 29 Nov 2023 10:59:29 GMT

- Might be due to SSH waiting for affirmative DNS response on PTR (reverse) DNS lookup for the HA partner being connected to , usually that info will not be present and or advertised on a DNS server ,

Re: Different long login time via ssh on FTD 4115 7.2.4

balaji.bandi — Wed, 29 Nov 2023 12:38:38 GMT

Hope you are connecting using IP address rigt ? not DNS (FQDN ?)

Re: Different long login time via ssh on FTD 4115 7.2.4

seahorse — Wed, 29 Nov 2023 14:51:24 GMT

yes, for connecting ip address is used

Re: Different long login time via ssh on FTD 4115 7.2.4

Mark Elsen — Wed, 29 Nov 2023 15:53:21 GMT

- That does not mean that the PTR problem is out of scope , will depend on the implentations in the SSH client ,

Re: Different long login time via ssh on FTD 4115 7.2.4

balaji.bandi — Wed, 29 Nov 2023 17:58:49 GMT

if that is should work as expected. if they are identicall - run packet capture and check