The ProxySG appliance supports IWA/Kerberos. Since Kerberos support is through IWA, the key distribution center (KDC) must be integrated with Active Directory. It works with IWA-Direct or IWA-BCAAA, but not with a standalone (non-AD integrated) MIT KDC.