[squid-users] Many TCP_DENIED with NTLM auth

I'm using the wb_ntlmauth helper, and I've noticed in my access.log there
will often be two TCP_DENIED requests for an object with no user
information, then a successful TCP request for the same object, this time
with the user information.

Example:

1057675581.034 19 192.168.127.100 TCP_DENIED/407 1454 GET
http://www.google.com/ - NONE/- text/html
1057675581.044 2 192.168.127.100 TCP_DENIED/407 1470 GET
http://www.google.com/ - NONE/- text/html
1057675581.181 136 192.168.127.100 TCP_MISS/200 1601 GET
http://www.google.com/ [domain]\[user] DIRECT/216.239.37.99 text/html

Note that the user nevers sees any error message in the browser; the page
loads perfectly.

Is this normal? Is there anything I can do to reduce the ocurrence of this?

Adam

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.237 / Virus Database: 115 - Release Date: 3/7/2001