Web browsers must be configured to access the Web Gateway interface name directly and not through the proxy. For Internet Explorer, you can make this change centrally using .pac files. The following is a sample .pac file script:

 function FindProxyForURL(url, host)
    {
    if (isPlainHostName(host))
        return "DIRECT";
    else
        return "PROXY 192.168.0.70:8080";
    }

The Use Interface Name for NTLM Authentication box is unchecked

If you do not want to modify DNS, leave Use Interface Name for NTLM Authentication unchecked. Add the IP address of Symantec Web Gateway to the Local Intranet configuration in Internet Explorer. Use the following format: http://num1.num2.num3.num4, such as http://192.168.2.1. You should be able to use Active Directory to push this browser configuration to the users' browsers.

Web browsers other than Microsoft Internet Explorer, such as Mozilla Firefox, Apple Safari, or Google Chrome

You may need to make a configuration change in the Web browser to support transparent NTLM authentication. For example, in Firefox add the IP address of each Symantec Web Gateway in your network to network.automatic-ntlm-auth.trusted-uris on the about:config page. See the Web browser documentation for more information.