Skip to main content
Announcements
Have questions about Qlik Connect? Join us live on April 10th, at 11 AM ET: SIGN UP NOW
cancel
Showing results for 
Search instead for 
Did you mean: 
jjordaan
Partner - Specialist
Partner - Specialist

How to setup QV Webserver in DMZ mode

Hi All,
I have little knowledge of firewalls and such, but can anyone tell me how to setup a QlikView Web Server in DMZ mode? Is there perhaps a guide and what are the requirements?
We are running a SB Edition of QlikView Server and I want to access severall QV documents outside our domain without a VPN connection.
Thx for youre help.

19 Replies
Not applicable

Hi Maguel and thanks again.

I found out that when I klick "Apply" button for the first time after doing a change I get the error I posted before which says: "DSC did not respond to request. ...", but when I klick the same button for a second time I get no error and everything is fine. Things update just as I expected.

The error talk about a 30 seconds timeout. Is it someting I can change? if yes, how?

Miguel_Angel_Baeyens

Hi,

Check that you have installed the correct version of .NET (3.5.1 until QliKView 10 SR4 and .NET Client and Extended profile from QlikView 10 SR4 and higher versions including 11).

Check in the Windows Services console that all services are running fine.

Finally, check that your proxy is not relaying or avoiding somehow your connection to the Server.

Hope that helps.

Miguel

Not applicable

We have .net 4, Qlikview Server x64 SP1 version 11.0.11282.0

The server is a virtual one. I work from inside the server to exclude any network issues.

I am not wich services that should be up. I included a picture of all stopped services on the server maybe you can give an idea of which is need and which is not.

stopped services.png

Miguel_Angel_Baeyens

Hi,

QlikView services start by "QlikView", and in your picture there is no stopped QlikView-something, so they are running.

The proxy (if any) could affect even if you work with Remote Desktop or locally in the QlikView Server, so first make sure you follow the steps I metioned above.

Miguel

Not applicable

Hi.

 

If the QVWS is in the DMZ and QVS in the Intranet, is using DMS and custom users the only option?

Cannot the QVWS simply pass the credentials to the QVS and that will use Active Directory to validate the user's credentials?

We have users that travel around the world and need to access some reports hosted by our internal QVS.

The idea is to let them use their domain users in the form of DOMAIN\user and get Active Driectory to do the authentication.

Thanks

Fabrizio

Not applicable

Help needed for QV 11.2 Enterprise edition.

Requirement is to make the accessible from Internet with https:// URL by having qlikview webserver in the dmz zone. For internal users , do I need to have another qlikview webserver installed on the actual machine where QVS is installed along with other services. ?? For this also the communication needs to be secured.

Q2) Assuming I have two webservers one on dmz and one in qv server machine. Both needing to be secured communication. Can I hport enable port 443 and 80 for that purpose. If so, can some one explain how many SSL certificates need to be configured and on what machines?

Q3) if I add qlikview webserver on the dmz in qemc, the are some folder paths in the webserver settings tab. Like c:\programdata\ qlikview \webserver etc

For the new webserver that I add in qemc , should I change these path names to say

\\170.45. 2.1\C:\programdata\qlikview\webserver ?, where 170.45.2.1 is the ip address of the server in the DMZ

I am not sure if this right.

I am sorry for these questions, we don't have a development server or a test server to try settings. I have to do on production with a down time of 2 days. Request your kind help please

Regards,

Santosh

Not applicable

Dear @Miguel_Angel_Baeyens

I am trying to implement webserver in DMZ. I have an EE QV Server License.

Below is my configuration

INTRANET:
QVS in NTFS
QDS
DSC
QMC
QVWS in NTLM (http and port 80)

DMZ SERVER:
only QVWS installed and authentication set as NTLM
QVWS pointing to above QVS and above DSC in QMC in QV Server
(HTTPS and 443, server certificate configured)

From Intranet, It is working fine and AD users are able to login and open QV Documents.

From Internet, I am able to open the URL from Internet. But only Local users of DMZ Server Machine are able to login and not the AD users.

Can you help me if i am technically correct or not.
Is it possible to enable AD user access through DMZ. Can you guide me on the configuration


Not applicable

Hi Santosh.

In the last months my team tried to implement the same architecture you're describing, and we had several calls and "demo sessions" with QlikView Support.

In the end It came out that the DMZ QVWS cannot authenticate the users against the AD because it does not belong to the internal network (where the AD is).

The only way would be to "duplicate" the AD in the DMZ:

img.jpg

The alternative we are now looking for is to use Neoteris or F5 as reverse proxy.

Hope this helps.

Best Regards,

Fabrizio

Not applicable

Many Thanks Fabrizio, This is very helpful. As of now, we are planning to use custom directory for DMZ

But, eventually, we need to work out something. And the slide shared by you will be of lot of help.

Regards,

Santosh

Bill_Britt
Former Employee
Former Employee

QlikView doesn't do authentication, it only does authorization (unless you are using custom users). Authentication is do by Windows and for the machine in the DMZ to do it for AD is that machine has to be a member of the AD.

You can write a SSO and pass the header to QVS and that will work.

Bill

Bill - Principal Technical Support Engineer at Qlik
To help users find verified answers, please don't forget to use the "Accept as Solution" button on any posts that helped you resolve your problem or question.