We are not able to change the server, here is the interesting part of all of this, I have dumped the interfaces, when it works, the client gets back a ""401 not authorized" and then sends a NTLMSSP_Negotiate, when it fails the client sees the "401 not authorized" but it does not send the NTLMSSP_Negotiate, now for the real interesting part. from the same client, with no changes, if I try to hit the server by the IP of the virtual server in the BIG-IP it fails, however if I set up a DNS entry for the IP of the virtual server and hit the server by name, it works every time and so far from every machine.
Nimbostratus