Hi Graham, The http-keep-alive mode is recommended, with the "option prefer-last-server" (which should be implicitly set by HAProxy in your case). Hopefully you're not using the http-reuse option.
401 are normal and are part of the NTLM negociation. You should see a few of them at the beginning of the connection, then regular traffic passing through. Baptiste
