Yes I am using the passthrough NTLM feature and not authentication on the UTM.
If you use the UTM authentication feature in the way the poster describes then getting Office apps connected to SharePoint isn't going to work.
If you set up authentication on the UTM and use basic authentication instead of the HTML based authentication then Office apps will work, but prompt for credentials when they access the document. The NTLM passthrough gets rid of this popup if the user logs in using cached credentials into their domain account.
The downside by passing the authentication to SharePoint directly is that the request goes straight through to the backend server whereas if the UTM does authentication then it can filter connections from invalid users. At some point I hope the authentication support on the UTM can work with NTLM rather than just basic authentication, but at least we have NTLM pass-through now!
I have a similar setup except I use SSL on SharePoint as well as I don't like going from SSL to non-SSL at the backend.
Yes I am using the passthrough NTLM feature and not authentication on the UTM.
If you use the UTM authentication feature in the way the poster describes then getting Office apps connected to SharePoint isn't going to work.
If you set up authentication on the UTM and use basic authentication instead of the HTML based authentication then Office apps will work, but prompt for credentials when they access the document. The NTLM passthrough gets rid of this popup if the user logs in using cached credentials into their domain account.
The downside by passing the authentication to SharePoint directly is that the request goes straight through to the backend server whereas if the UTM does authentication then it can filter connections from invalid users. At some point I hope the authentication support on the UTM can work with NTLM rather than just basic authentication, but at least we have NTLM pass-through now!
I have a similar setup except I use SSL on SharePoint as well as I don't like going from SSL to non-SSL at the backend.
