Kerberos Authentication in Browser

Please advise

AD SSO (Kerberos) works without any client, that is correct. There are certain dependencies you need to do. docs.sophos.com/.../

You can reference this community post as well. Although in the post they're comparing STAS with kerberos but it'll help you understand some keypoints

community.sophos.com/.../kerberos-authentication

OK!

Based on the link I had major task configured already only 1-2 were to be done which I did. Now if I open Log viewer and see that from which rule my packets are going after disconnecting the Client Authentication, it goes from DNS rule instead of rule which it should use that was prior used when I was connected using Client Authentication ?

Apart from the above do I not need to configure in IE / Chrome the following

4) (Conditional) If you are using Internet Explorer, configure the browser to trust the appliance:

1. a) Click Tools > Internet Options > Security > Local intranet > Sites > Advanced. In the Add this website to the zone field, enter the Base URL for the appliance, then click Add.
2. b) In the configuration example, this URL is cloudaccess.com.
3. c) Click Close, then click OK.
4. d) Click Tools > Internet Options > Advanced.
5. e) Verify in the Security section that Enable Integrated Windows Authentication is selected, then click OK.
6. f) Restart the browser.

Do I ?

Please advise!