Here’s a nice simple diagram below, which explains the differences between NTLM and Kerberos Authentication in TMG/ISA
To Note:
- WPAD on TMG/ISA is set to NTLM by default
- You can change this by using the script in the following blog
- http://support.risualblogs.com/blog/2011/07/01/auto-detect-not-working-via-wpad-in-ie-via-tmg/
