Skip to main content
shabeebkp
shabeebkp
New Member
September 28, 2025
Question

FortiProxy Explicit Proxy Deployment | Recommended Authentication Method

  • September 28, 2025
  • 1 reply
  • 295 views

Hello,

 

I am going to deploy ForiProxy in explicit proxy mode for around 2000 users. What is the recommended authentication method for ForiProxy. Is it Kerberos, NTLM or FSSO?.

 

Please advise.

 

Thanks

Shabeeb

1 reply

Markus_M
Staff & Editor
Markus_M
Staff & Editor
September 29, 2025

It depends:

Kerberos will be the most accurate method but also a bit tricky to troubleshoot if there are problems. Also it can be a bit load intensive.

FSSO will be less accurate by time; generally no issues, but end users IP changes will have a slight delay of a minute, give or take. It will however generate less load on FortiProxy and towards the LDAP server. NTLM shouldn't be considered anymore.

    Terms & ConditionsAccessibility statement