IEPlugin. Error "Connected to server OK, Negotiations Timed Out"

[#1]

Hello

I have developer QV Server 9.7320 on MS Windows Server 2008R2 platform, IIS7, .NET 3.5.1

When i trying to open QV document on our web site with Plugin, after they promt for password and type it, periodically see next errors:

After I press "Back" button in my IE, and then try to open the same document, it open without any problem.

This problems are not permanent, and somtimes it is shown, sometimes not.

Locally all working correct via http protocol. Also all working with AJAX ZFP.

Our principal scheme:

What additional information need to post here?

[vgutkovsky]

There are many possible causes for this error. However, since it happens only periodically for you, my first guess would be that it's a network error. Run some tests on your communications port (by default 4747) to see how lossy it is. Also check any firewall policies (both software and hardware).

Regards,

[MichaelRobertshaw · Accepted solution]

It seems that you've configured ISA to forward /script/qvstunnel.dll to your IIS instance. This might seem desirable only because the QvWS doesn't provide a human-readable response to /scripts/qvstunnle.dll?test but it DOES still process those requests from the client.

I suggest you configure ISA to forward /scripts to QvWS, stop IIS (or remove the /scripts virtual directory), and create a port-forwarding rule on ISA so that incoming tcp/4747 requests are delivered directly to the QlikView Server.

Also your IIS and QvWS can share port 80 and/or port 443 if you start the Windows "Net TCP Port Sharing service".

[#4]

- "I suggest you configure ISA to forward /scripts to QvWS, stop IIS (or remove the /scripts virtual directory)"

I do this, and have another error:

- "and create a port-forwarding rule on ISA so that incoming tcp/4747 requests are delivered directly to the QlikView Server."

We can't do that, because our client security settings don't allow non-standart outgoing ports...

[#5]

On ISA I see:

Failed Connection Attempt	TMG 22.01.2010 11:27:31
Log type: Web Proxy (Reverse)
Status: 64 The specified network name is no longer available.
Rule: QLIKVIEW WEB (SSL)
Source: External (***.***.***.***:40560)
Destination: Local Host (qv2008.mdm.local 10.1.2.7:443)
Request: POST https://10.1.2.7:443/scripts/QVSTunnel.dll?host=qv2008
Filter information: Req ID: 0a0c8bd5; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes
Protocol: https
User: anonymous
Additional information Client agent: QlikView Client Object source: Internet (Source is the Internet. Object was added to the cache.) Cache info: 0x0 Processing time: 1 MIME type:

[#6]

This only true, when clients try to connect by https protocol, when try to connect by http - all works fine (include tunneling)

Thanks!