Azure Application Gateway and NTLM

bcgt 10

Hi,

I asked this question here last year, but never received an answer.

Trying again, given recent (unsurprising) news:

We just received notice that Application Gateway v1 will be retired in April 2026.

Does, or will, Application Gateway v2 support applications that use NTLM?

What is the suggested solution if not ?(Note: the application is 3rd party and cannot be changed.)

Cheers,

Geoff

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
ChaitanyaNaykodi-MSFT 22,941 Reputation points Microsoft Employee

2023-05-07T20:58:41.7133333+00:00

@bcgt

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
David C 0 Reputation points

2023-09-19T13:28:49.7133333+00:00

Has there been any update on NTLM support for V2? I need NTLM support today and cannot deploy V1 (as of July 1, no new V1 deployments) and it's not supported in V2. Kind of stuck.

1 answer

ChaitanyaNaykodi-MSFT 22,941 Reputation points Microsoft Employee

2023-04-28T23:35:14.1266667+00:00

@bcgt

Apologies for not getting back to you on the older thread.

Does, or will, Application Gateway v2 support applications that use NTLM?

This feature is in the roadmap for Azure application Gateway V2 but there is no fixed ETA yet on when it will be rolled out.

Hope this helps! Please let me know if you have any questions. Thank you!
Please sign in to rate this answer.
Johnson, Conrad 0 Reputation points

2024-03-21T00:56:29.6466667+00:00

Hello figured I comment here. I am not a representative of Microsoft. I am actively using the Standard V2 and apply NTLM to the backends. The backend are old SOAP, WCF running on IIS 10. It's important because the gateway has not identity that IIS is configured for Anonymous Auth, and it will simply pick up your NTLM when routing to backend.

NET_TCP is proving to be more difficult.

Tibor Erdelyi 0 Reputation points

2024-04-04T14:42:24.29+00:00

Any update on this? We have the same problem. Is it planned to support?

Johnson, Conrad 0 Reputation points

2024-04-12T02:19:17.84+00:00

The best bet is to go with Internal Load Balancers (I know it's not ideal) if you require (Private IP only). While I responded that V2 is passing NTLM to IIS10 successfully, according to documentation, Microsoft's stance is that it is not supported. Gateway V1 deprecates on 28 April 2026. So they have a bit of runway to get the feature to us.
Sign in to comment