article Qlik Sense Enterprise on Windows: How to configure the Host allow list and best practices in Official Support Articles

Qlik Sense Enterprise on Windows: How to configure the Host allow list and best practices

Sonja_Bauernfeind — Wed, 25 Mar 2026 12:07:32 GMT

The WebSocket Host allow list grants access to the hub from aliases and redirected addresses. This article explains how to configure the list and includes general DOs and DONTs.

To configure the Host allow list:

Open the Qlik Sense Management Console
Navigate to Virtual Proxies
Select the Virtual Proxy you wish to modify
Double-click the Virtual Proxy or choose Edit
Expand the Properties menu by selecting Advanced
Scroll down to locate the Host allow list
Modify the list accordingly and click Apply

Best Practices

Valid entries:

domain.com
subdomain.domain.com

Incorrect entries:

.domain.com
*.domain.com

Re: How to configure the WebSocket origin allow list and best practices

Ken_T — Mon, 16 May 2022 17:09:49 GMT

would this allow one environment to have mashups that can get js and css resources from another environment? example, we have an enterprise (soon to be saas, maybe) and a QAP. 2 different environments.... we develop mashups locally and and have to point to resources on the enterprise system with an absolute URL (soon to be saas maybe). can we whitelist things so that the QAP mashup can use css and js from another environment? so we don't have to edit the mashup for deployment to QAP, which we use for public deployment. we will be testing this soon, and I am not sure if it is a common scenario or not.

Re: How to configure the WebSocket origin allow list and best practices

Sonja_Bauernfeind — Tue, 17 May 2022 06:37:12 GMT

Hello Ken,

I think it may be best if you posted this question over in our Qlik Sense Integration forum to connect with users and active support engineers about it. The topic is a bit too complex to cover in an article discussion.

All the best,

Sonja

Re: How to configure the WebSocket origin allow list and best practices

fatinfazrizanor — Wed, 18 Jan 2023 04:55:37 GMT

Hi i have put the domain.com, and when i open the hub via the new url, it have the authentication login page as normal. But when i login, i cannot access with no error. the log in page keep appearing as it did not recognize my id.
I can login only if i use the original url.
Can you help what is the real problem?

Re: How to configure the WebSocket origin allow list and best practices

Sonja_Bauernfeind — Mon, 23 Jan 2023 10:35:21 GMT

Hello @fatinfazrizanor

Changing the WebSocket Allow List will not affect authentication, and there may be something else at work here. I would suggest posting about your issue in our active Deployment & Management forum.

In the meantime, this might help: Problem logging in to QlikSense on the server using the dns-name & Cert question

All the best,
Sonja

Re: How to configure the WebSocket origin allow list and best practices

SGMarquez — Fri, 24 Feb 2023 13:18:12 GMT

Gracias por las informaciones, el problema lo tenemos al acceder desde el sistema operativo de windows, si accedemos desde un ordenador Mac , movil iphone y un movil android si te permite, solo hay problemas con windows.

article Qlik Sense Enterprise on Windows: How to configure the Host allow list and best practices in Official Support Articles

Qlik Sense Enterprise on Windows: How to configure the Host allow list and best practices

To configure the Host allow list:

Best Practices

Related Content:

Re: How to configure the WebSocket origin allow list and best practices

Re: How to configure the WebSocket origin allow list and best practices

Re: How to configure the WebSocket origin allow list and best practices

Re: How to configure the WebSocket origin allow list and best practices

Re: How to configure the WebSocket origin allow list and best practices