Google Earth does not support transparent Authentication, so a Rule to bypass Authentication for that software is necessary.
In a Web Authentication Layer in Visual Policy Manager, Add a new rule and move it to the very top of that Layer.
If preferred, the following Content Policy Language (CPL) may be added instead to the Local Policy File:
<Proxy>
request.header.User-Agent="GoogleEarth" authenticate(no)