Windows Authentication is more preferable. By using windows authentication you can directly mention the intranet host name in allow users list and deny users list of the authorization tag of the web.config file.

Windows.

Since you will have the Windows-authentication details available in the Intranet.

Your Web server can directly fetch these details.