topic dmz server configure in QlikView

dmz server configure

Mon, 26 Jan 2026 18:19:17 GMT

Hi Guys,

I would like to give users external access withouth VPN.

I can connect from server A(internal QV server) to dmz server > i added the dmz server in QMC and there is no error there.

But when i open the accesspoint in the dmz server i get an error message: no server.

- I've temporarly opened all ports between server A and the dmz server

- selected in QMC the correct server to connect: QVS@serverA (accespoint>serverconnection>name)

- i've installed on the dmz only the webserver (no iis)

I did not configure any authorization allthough i would like to use Active directory also in DMZ, but this will propably not work. My other option is local users on dmz (or DMS settings if its only possible to only configure for the DMZ server, and still use AD internaly)

But i for some reason i cannot connect to server A.

Am i missing something? (could it be the login credentials in the services qlikview webservice or the login in the QMC?)

Re: dmz server configure

Bill_Britt — Mon, 09 Sep 2013 12:17:59 GMT

Hi,

Did you edit the Webserver config.xlm file to point to the QlikView Server? It is located at C:\ProgramData\QlikTech\WebServer

Bill

Re: dmz server configure

Mon, 09 Sep 2013 12:32:36 GMT

Hi Bill,

Thanks for your reply.

I've looked into that config file. It also seems to point to the qlikview server. In the log files it tries to connect to server A but it fails.

I did not edit the config file.What should i edit?

Re: Re: dmz server configure

Bill_Britt — Mon, 09 Sep 2013 12:37:15 GMT

HI,

You will need to change

<Name>QVS@qvlab</Name>

<LoadBalancing>CpuUsage</LoadBalancing>

<AlwaysTunnel>False</AlwaysTunnel>

<Machine>qvlab</Machine>

<LinkMachineName>qvtest.net</LinkMachineName>

<Password>Encrypted=DxdCGMWfOwU=</Password>

</AddQvs>

</AddCluster>

To point to your QVS server.

Re: dmz server configure

Mon, 09 Sep 2013 12:43:17 GMT

Hi Bill,

It seems to be correct allready. Probably by the changes i did in the QMC.

NL01is159 is Server A (where QlikView server is installed)

NL01sa010 is server B (The dmz server)

Do you see anything off in the config?

<ConfigUrl>http://_:4750/QVWS/Service</ConfigUrl>

<TunnelUrl>/scripts/QVSTunnel.dll</TunnelUrl>

<QvsStatusUrl>/QvAJAXZfc/QvsStatus.aspx</QvsStatusUrl>

<LogLevel>Information</LogLevel>

<WriteStackTrace>False</WriteStackTrace>

<InstallationPath>C:\Program Files\QlikView\Server\Web Server</InstallationPath>

<QvsAuthenticationProt>Negotiate</QvsAuthenticationProt>

<EnableUtilizationLogging>False</EnableUtilizationLogging>

<LoadBalancing>CpuUsage</LoadBalancing>

<AlwaysTunnel>False</AlwaysTunnel>

<Password>Encrypted=DxdCGMWfOwU=</Password>

</AddQvs>

</AddCluster>

<Url>http://nl01is159:4730/DSC/Service</Url>

<Username>DxdCGMWfOwU=</Username>

<Password>DxdCGMWfOwU=</Password>

<LogLevel>Normal</LogLevel>

</DirectoryServiceConnectorSettings>

</AddDSCCluster>

<AuthenticationLevel>Always</AuthenticationLevel>

<LoginAddress>/qlikview/login.htm</LoginAddress>

<LogoutAddress>logout.htm</LogoutAddress>

</Authentication>

<Path>/QvAJAXZfc/AccessPoint.aspx</Path>

<AjaxClientPath>/QvAJAXZfc/opendoc.htm</AjaxClientPath>

<PluginClientPath>/QvPlugin/opendoc.htm</PluginClientPath>

<DefaultView>Thumbnails</DefaultView>

<HighlightNotExecutedJobs>False</HighlightNotExecutedJobs>

<AllowCmdUrl>False</AllowCmdUrl>

</AccessPoint>

Re: dmz server configure

Bill_Britt — Mon, 09 Sep 2013 12:52:53 GMT

HI,

No, that looks correct. Are you using the same accounts on both systems for the service account and to run the Application Pool (if you are using IIS)

Bill

Re: dmz server configure

Mon, 09 Sep 2013 12:59:22 GMT

Hi Bill,

I think that you put your finger on the spot here. I'm not using IIS. but i'm not sure how to use the same accounts.

Username en Password are the same for both servers.

But on server 1 is on a domain: companydomain\qlikviewadmin

DMZ server is without active directory so .\qlikviewadmin

Do i need to do something in the services (qlikview webserver > Log on as setting?). This is currently on local

or do i need to do something with the login credentials in the QMC> edit webserver properties

Thanks for helping me trough this struggle!

Re: dmz server configure

Bill_Britt — Mon, 09 Sep 2013 13:30:49 GMT

Hi,

OK, then lets try this. On the Machine that is running QVS, try to create a local User that is the same as the user in the DMZ and use the same password. Make this user a member of the QlikView Administrator group.

Let me know what happens.

Bill

Re: dmz server configure

Mon, 09 Sep 2013 14:48:21 GMT

Hi Bill,

I added on both servers a new local admin account and added it in the qlikview administrator group. but unfortunately it din't help.

On the accespoint it says welcome NL01SA010\qlikadmin

NL01sa010 is the DMZ server. Is this an issue?

Re: dmz server configure

Mon, 09 Sep 2013 16:04:06 GMT

I found out what went wrong!

IT din't configure the DMZ server correctly. They forgot to add the domain prefix in the dns resolver. thanks allot for your help. it works yeey!

Re: dmz server configure

Tue, 10 Sep 2013 09:48:17 GMT

He Bill,

Maybe you know this aswell: Currently i use local users on the DMZ server to acces their qlikview documents.

This works great but it will be hard to maintain 2 locals when the userbase grows. Also the users need 2 credentials.

Is it easy without rebuilding a authorization page and procedure to tunnel the AD authentication and authorization?

Thanks again!

Re: dmz server configure

Bill_Britt — Tue, 10 Sep 2013 16:29:33 GMT

HI,

Yes, this should be able to be done. You would have to run the Server in DMS mode and create a director connector pointing to the server in the DMZ. Then when you distribute a QVW with publisher you would pick the user in either the DMZ or AD.

Bill

Re: dmz server configure

Thu, 12 Sep 2013 04:50:02 GMT

Hi Jelco,

I have the exact requirement as you have. Additionally i also need to have a QVWS running on QVS machine to server internal users. Both the webservers need to be secured. (https://)

Can you please tell me if you have implemented secured access and if so, which certificates have you configured?

Hi Bill, if you also can help please.

Santosh

Re: dmz server configure

Bill_Britt — Thu, 12 Sep 2013 12:18:39 GMT

Hi Santosh,

Yes, you can do this. Not sure what you mean about the certificates this would be a question for your IT staff.

Bill

Re: dmz server configure

Thu, 12 Sep 2013 12:23:14 GMT

You can also use Certificates , this way you dont have to create a local account to impersonate an account created on the machine in DMZ

Re: dmz server configure

Fri, 13 Sep 2013 05:24:06 GMT

Thank you Bill, I meant SSL server certificates. Whether it needs to be configured on qlikview server machine or qlikview web server machine in DMZ.

Re: dmz server configure

Fri, 13 Sep 2013 05:26:45 GMT

Andreas Klittbo Thank you, this is s new thing i got to know on which i have to do research.

Re: dmz server configure

Fri, 13 Sep 2013 14:26:46 GMT

@Santosh to work with https i've binded a wildcard certificate to the 443 port. You can found here how to do that: http://community.qlik.com/message/193912#193912

I asume Andreas means client based certificates. I don't want to use this because then i need to install something @ all the clients.

@Bill is there a guide or something on how to create the director connector or tunneling the AD trough the dmz? I don't want to destroy my internal server distribution/authorization by doing somehting wrong:p

Re: dmz server configure

Thu, 20 Nov 2014 23:38:58 GMT

Bill,

I read the Microsoft AD FS 2.0 integration with QlikView 11 and I had a couple of questions that I'm hoping you can point me in the right direction for.

Do the ADFS services get installed on the web server or a separate server in the DMZ based on the following step?

How to setup your AD FS 2.0 Server

Use the following procedure to install the AD FS 2.0 software on your Member Server.

The AdfsSetup.exe installation package will install AD FS 2.0 and all the prerequisite

software components that it requires.

If I have an external SSL from a public CA do I need to create a self signed cert?

How to create a new self-signed certificate

Attached to this document, you will find a Power Shell Script saved into a ZIP file called

makecert.zip. Please use the included Power Shell script in your Power Shell editor and

do the following:

3. Since this is in the DMZ will I require an ADFS Proxy server in the DMZ and an ADFS server in my internal VLAN?