FortiProxy Explicit Proxy Deployment | Recommended Authentication Method

[shabeebkp]

Hello,

I am going to deploy ForiProxy in explicit proxy mode for around 2000 users. What is the recommended authentication method for ForiProxy. Is it Kerberos, NTLM or FSSO?.

Please advise.

Thanks

Shabeeb

[Markus_M]

It depends:

Kerberos will be the most accurate method but also a bit tricky to troubleshoot if there are problems. Also it can be a bit load intensive.

FSSO will be less accurate by time; generally no issues, but end users IP changes will have a slight delay of a minute, give or take. It will however generate less load on FortiProxy and towards the LDAP server. NTLM shouldn't be considered anymore.