I am curious what I should be looking at.

If I try to access a known forbidden site, it can take 10 seconds or more
to display the FORBIDDEN notice. What could be causing it to take so long?

I thought it might be number of rules related, but we only have 13 rules
setup and only 3 of which are deny rules. The others are allow rules.