I use McAfee Web Gateway proxies that only support Kerberos authentication. When trying to use these devices as an upstream proxy fiddler first tries NTLMSSP and then NTLMSSP2 and then prompts for credentials. It never tries Kerberos in the request header section "Proxy-Authorization: Negotiate"