I worked on a case recently  where we had external web server on which we had NTLM authentication and users who were trying to access the website on it were having problems accessing it. I have written blog on our ISA/TMG product team blog here is the link

 
it turned out to be a very interesting issue.