Here’s a nice simple diagram below, which explains the differences between NTLM and Kerberos Authentication in TMG/ISA
To Note:
-
WPAD on TMG/ISA is set to NTLM by default
-
You can change this by using the script in the following blog
-
http://support.risualblogs.com/blog/2011/07/01/auto-detect-not-working-via-wpad-in-ie-via-tmg/
-
-