When connecting to checkpoint gateways, there may be a delay of 5 or more seconds when waiting for the password prompt. This is due a reverse DNS lookup that the gateway cannot perform until timeout is reached.

The UseDNS option of the SSH daemon can be disabled to avoid this behaviour:

Save a backup of the sshd_config file

[Expert@vsx1:0]# cp /etc/ssh/sshd_config /etc/ssh/sshd_config.BAK

Disable the UseDNS option

Use this command to replace the string “#UseDNS yes” by “UseDNS no”

[Expert@vsx1:0]# sed -i 's/#UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config

Restart SSHD daemon

[Expert@vsx1:0]# service sshd restart
Stopping sshd:                                           [  OK  ]
Starting sshd:                                           [  OK  ]

Compare both files

To check the config file has been correctly modified

[Expert@vsx1:0]# diff /etc/ssh/sshd_config /etc/ssh/sshd_config.BAK
< UseDNS no
> #UseDNS yes

This is the official SK regarding this problem: