5.6.2: explict proxy with fsso authentication and fallback to ntlm

Hello!

 I have a customer where i need to use the FortiGate explicit proxy. Most part of the authentication is solved via FSSO, but i need to use NTLM as a fallback. In order to do this i took a look at authentication schemes and rules, but i dont quite understand how -or "if"- they are related.

 What are the steps? I went as far as doing this:

config authentication scheme
 edit "FSSO"
 set method fsso
 next
 edit "NTLM"
 set method ntlm
 next
end

config authentication rule edit "proxy explicito" set srcaddr "all" set active-auth-method "NTLM" set sso-auth-method "FSSO" next end Thanks in advance.