In the MTA section of the Global Settings of the Admin console, you set the relay MTA for external delivery

Well suppose this external MTA requires authentication (username and password, or maybe SASL/SSL of some sort), you cannot set it here.

I think at LEAST zimbra requires a username/password authentication to be set if required