What I found in getting Kerberos to work in FortiWeb is making sure the
"Delegated HTTP Service Principal Name" is absolutely correct with case
sensitivity. The domain portion should be in upper case.I think FortiWeb
itself passes the packets to IIS ...
