Since this was internal, a standard firewall program, such as Tumbleweed, will not log a delay in the event logs.
However, the server should have these logs if they have not already been discarded. These logs may show you what caused the delay especially if the user was given a delayed noticed generated by the server.
Hope this helps, |