- You set up a Microsoft Forefront Threat Management Gateway (TMG) 2010 array that has multiple domain member nodes.
- You enable the EnableSharedCookie option to allow for external authenticated users to be handled by all TMG nodes.
- You configure the TMG firewall service to run as a specific domain account so that internal clients can use the Kerberos protocol to authenticate with the TMG nodes.
In this scenario, you find that external users are prompted unexpectedly for authentication when they are redirected between TMG nodes.
Article ID: 2965004 - Last Review: Jun 17, 2015 - Revision: 1