Kaspersky Secure Mail Gateway

Configuring NTLM authentication

We recommend using Kerberos authentication because this mechanism is the most secure. If you use NTLM authentication, hackers can gain access to user passwords by intercepting network traffic.

To configure

1. In the application web interface window, select the Settings → Application access → Single Sign-On login section.
2. Select the NTLM tab.
3. Set the Use NTLM toggle switch to Enabled.
4. In the Domain controller IP address/domain name field, enter the IP address or domain name of the domain controller that will be used for authentication.

   You can specify two domain controllers. To add a second controller, click .

5. In the Port field, enter the port used for connecting to the domain controller.

   By default, port 445 is used.

6. Click Save.

NTLM authentication is configured. Users authenticated in Active Directory can connect to the application web interface using the Single Sign-On technology. Access to application functionality is determined by the permissions of the application user account.

When connecting from computers that are not part of the domain, the user will have to enter the credentials of the user's domain account.