3.1.5.3 Receiving an NNTP_AUTH_NTLM_Blob_Response
The expected state is inside_authentication.
When a client receives this message, it MUST de-encapsulate it to obtain the embedded NTLM message and pass it to the NTLM software for processing. The NTLM software may then either report an error or report success, and return an NTLM message to be sent to the server.