Leveraging BIG-IP APM for seamless client NTLM Authentication

Many customers express interest to use F5 Access Policy Manager for transparent seamless authentication for their users.  There are a couple of leading use cases that drive that desired behavior: ...
Published Jul 22, 2014
Version 1.0
BIG-IP Access Policy Manager (APM)
microsoft
ntlm
security
AlgebraicMirror's avatar
AlgebraicMirror
Icon for Altostratus rankAltostratus
Jul 28, 2015
One other question: is it required to make the "Port translation" setting on the virtual server "preserve-strict"? Preserve-strict always makes me nervous, because if some other connection already uses the same ephemeral port you just tried to connect with, then strict means you won't translate the port and will just send the client a TCP RST (reset), breaking their connection. So is it absolutely required that it be "preserve-strict", and if so why?