Getting basic auth prompt before apm logon page event

Hi   I´ve setup a basic login policy. Check if client subnet is RFC1918, if yes do ntlm auth, if not go to logon page and do MFA login.   But.. when i access the VIP external i get a basic a...