Fortigate - Explicit proxy with Kerberos

[kamarale]

Hello,

I have a question about kerberos authentication. Seeing this doc:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-explicit-proxy-authentication-wi...

Why do I need the kerberos authentcation? I mean what would be the difference if I do not configure the kerberos part and I do configure the rest (LDAP,groups, and add group to proxy policy)?

If I do not configure the kerberos part I would still have the active authentication (autentication windows popup on browser) the a user tries to go to internet,right?

I do not the benefit added with kerberos. Is it to just add SSO like authentication (passive authentication) ??

I am new to kerberos protocol...

thank you in advance.

Regars!

[dkochhar]

@kamarale 
The Poll works for the FSSO agent. If you have the FSSO agents installed then it pools the additional information from the server. If you cannot install the FSSO agent therefore we can continue adding the LDAP server from the FortiGate GUI under the User and authentication.