topic Re: QlikView system network architecture (DMZ/Intranet) in QlikView

QlikView system network architecture (DMZ/Intranet)

Mon, 26 Jan 2026 18:19:17 GMT

Hello,

we are searching a best practice to setup our QlikView system (DMZ/Intranet).

We have two networks, a DMZ and an intranet. Our databases (infrastructure resource) are only accessible from the intranet and aren't accessible from the DMZ regarding security reasons. The clients should only be able to access to the QVWS or the IIS from internet. All other services should operate in the intranet only (QVS/QVP).

Is it possible to setup this?

Is this a recommended setup?

Which firewall rules do we have to create?

Thanks for your support.

Gunnar Weissmann

Re: QlikView system network architecture (DMZ/Intranet)

Anonymous — Thu, 30 Oct 2014 17:03:51 GMT

Gunnar

Yup :

On LAN :

QlikView Publisher [if you use it]

QlikView Server

QlikView Web Server [for LAN base clients]

On DMZ

QlikView Web Server [for external client over the internet]

See for QlikView Ports for ports used to sort firewall.

Bill

Re: QlikView system network architecture (DMZ/Intranet)

Bill_Britt — Thu, 30 Oct 2014 18:49:28 GMT

Hi,

You can setup a system in the DMZ and use publisher to publish the reports to that machine.

Bill

Re: QlikView system network architecture (DMZ/Intranet)

Fri, 31 Oct 2014 07:30:24 GMT

Hi Bill,

thank's for your answer. So it's possible only to push the reports to the webserver in the DMZ so i have not to allow communication from the DMZ to the intranet? How are user rights handled on the webserver with this setup? Is there a special configuration for that?

Thank you,

Gunnar

Re: QlikView system network architecture (DMZ/Intranet)

Anonymous — Sat, 01 Nov 2014 07:07:29 GMT

Gunnar

I use AD for authentication.

Bill

Re: QlikView system network architecture (DMZ/Intranet)

Mon, 03 Nov 2014 13:59:49 GMT

okay, but which communication directions do you allow? We only want to allow communication from the intranet to the dmz not from the dmz to the intranet (except stateful communication). Does this work with AD?

Thank you!

Re: QlikView system network architecture (DMZ/Intranet)

Anonymous — Mon, 03 Nov 2014 15:12:42 GMT

Gunnar

If you do not allow communications for the DMZ to your internal LAN then it won't work.

Unless you decide to use proprietary authentication and also host a QV Server and your qvw's in the DMZ which would be extremely insecure and not something I would ever do myself.

Bill

Re: QlikView system network architecture (DMZ/Intranet)

Bill_Britt — Mon, 03 Nov 2014 15:15:21 GMT

Hi,

You can use the local directory for the QVS server to host the users.

Bill

Re: QlikView system network architecture (DMZ/Intranet)

KishoreSuri — Mon, 29 Apr 2019 05:30:38 GMT

Hi,

Please help me that what are the changes or steps i have to follow in QlikView web Servers tab under QMC to access Qlikview thru internet.
I never found any steps followed to make changes for internet access. EVERYONE IS EXPLAINING "HOW TO ESTABLISH INTERNET ACCESS THRU DMZ " but no one giving proper ,clear explanation with steps.
Anyone reply asap with steps.

Re: QlikView system network architecture (DMZ/Intranet)

sq1_arsal — Tue, 14 May 2019 07:27:29 GMT

Hi Guys,

Anyone able to do this scenario? I am also looking for configuration setting.

thanks

muhammad