WEBVPN NTLM Authentication

[g-oliveira]

Regarding the NTLM authentication and WEBVPN.

Does the Cisco VPN 3005, forward the NTLM requests to the end user only?

Having a webvpn user authenticated, via Kerberos, in an active directory server, can the Cisco VPN 3005 answer to the NTLM requests from an internal WebServer on behalf of the aforementioned user?

[a-vazquez]

Cisco VPN 3000 Series Concentrator, Release 4.7; Cisco SSL VPN Client, Release 1.0 supports NTLM authentication without prompting end users. However, if their Exchange server and domain controller are on different machines, they may be prompted to specify a domain during WebVPN login. The OWA/Exchange server specifies the authentication method. If it specifies both Basic and NTLM authentication, NTLM is used). No VPN Concentrator configuration is required.

Refer the following URL for more detailed and clear information on this.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/prod_release_note09186a0080405b6c.html#wp500521