Hi In my case, a client is in a physical subnet A with a private IP. Meanwhile, the server is in another physical subnet with a private IP. The client must cross NAT and firewall/gateway to access to the server. Does the Kerberos work in this case? Thanks for help in advance. -Yuzhong