Alveden,

I would recommend working with Support to get specific answers to your questions - but generally speaking you do not need both DCinterface and NTLM on.  If you've installed DCinterface, you can turn NTLM off since logins will be captured on the DC itself.

Hi guys,

What would SWG's behavior be if we have the DCInterface on and a machine that is not part of the domain tries to access the Internet?

Will there be a popup asking for authentication and then the user can type in his domain credentials?

Thanks,

Bernardo

Bernardo,

Depends on whether or not you enable NTLM and create an authentication policy for that IP. 

If you do not, there will be no user popup or authentication on the user side at all and a non-domain user will get the applicable IP based policy applied to them.  If no IP based policy exists for the user IP, they will get the default policy.

If you enable NTLM and choose to authenticate that user's IP, the user would get prompted if they are not already logged onto the domain.

SI

You might to check out this KB that talks about the two methods of identifying end users:

http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2009111011140954

One thing incorrect in the KB is that we are now Supporting both methods on AD 2008.

Kevin

"For more information see Chapter 6 of the Implementation guild. The guild is available here:"

I think it means GUIDE not Guild

Hah - good catch.  I'll have it changed.  Maybe the article author had World of Warcraft on the mind ;).