Thanks Jon. This was the issue. The release from McAfee came out long after the problem started showing itself. Caused quite a headache for our company with authentication breaking for everyone. At least it's fixed now.
I do have to ask, you or anyone, how can an update to the GTI Category Web Reputation break NTLM authentication, when the two realms seem completely unrelated???
It has to do with the OpenSSL package that's a componenet needed for both. It's used to communicate back to the cloud by the SDK and also to communicate with an NTLM agent or LDAPS server.